Backdoor.Win32.Dumador.c FTP Server stack-based overflow

Summaryinfo

A vulnerability, which was classified as critical, has been found in Backdoor.Win32.Dumador.c. The impacted element is an unknown function of the component FTP Server. Performing a manipulation results in stack-based overflow. Remote exploitation of the attack is possible. Furthermore, an exploit is available. It is suggested to use restrictive firewalling.

Detailsinfo

A vulnerability classified as critical has been found in Backdoor.Win32.Dumador.c (affected version unknown). This affects an unknown functionality of the component FTP Server. The manipulation with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability.

It is possible to read the advisory at malvuln.com. The exploitability is told to be easy. It is possible to initiate the attack remotely. Technical details are unknown but a public exploit is available.

The exploit is shared for download at malvuln.com. It is declared as proof-of-concept.

It is possible to mitigate the weakness by firewalling .

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Remote Access Software

Name

• Backdoor.Win32.Dumador.c

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #317195: Backdoor.Win32.Dumador.c 6cc630843cabf23621375830df474bc5 Remote Stack Buffer Overflow (SEH) (by malvuln)

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion