KLA10101 SB vulnerabilities in Cerberus FTP Server

A CSRF vulnerability was found in the Cerberus FTP Server. By exploiting this vulnerability malicious users can hijack the administrators’ auth. This vulnerability can be exploited from the network at a point related to the web interface.

Original advisories

Related products

Cerberus-FTP-Server

CVE list

CVE-2012-2999 high

Solution

Update to latest version

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Cerberus FTP Server versions 5.0.4.0 and earlier