CVE-2019-4599

IBM Sterling Connect:Express for UNIX FTP Server is affected by a heap-based buffer overflow in the FTP service (CVE-2019-4599). The issue arises from improper bounds checking in the ALLO handling of the FTP server, where the static buffer in BSS (rem_file) can overflow when processing input with...

Security Bulletin: IBM Sterling Connect:Express for UNIX FTP Server is Affected by a BBS Overflow Vulnerability (CVE-2019-4599)

Summary IBM Sterling Connect:Express for UNIX is vulnerable to a heap-based buffer overflow, caused by improper bounds checking in the FTP service. A remote attacker could overflow a buffer and execute arbitrary commands or cause a denial of service. Vulnerability Details CVE-ID: CVE-2019-4599...