Test ID:	1.3.6.1.4.1.25623.1.0.800546
Category:	FTP
Title:	Null FTP Server SITE Command Execution Vulnerability
Summary:	Null FTP Server is prone to an arbitrary code execution vulnerability.
Description:	Summary: Null FTP Server is prone to an arbitrary code execution vulnerability. Vulnerability Insight: An error is generated while handling custom SITE command containing shell metacharacters such as & (ampersand) as a part of an argument. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary codes in the context of the application. Affected Software/OS: NULL FTP Server Free and Pro version prior to 1.1.0.8 on Windows Solution: Upgrade to the latest version 1.1.0.8 or later. CVSS Score: 7.1 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6534 BugTraq ID: 32656 http://www.securityfocus.com/bid/32656 https://www.exploit-db.com/exploits/7355 http://vuln.sg/nullftpserver1107-en.html http://www.osvdb.org/50486 http://secunia.com/advisories/32999 http://www.vupen.com/english/advisories/2008/3367 XForce ISS Database: nullftpserver-site-command-execution(47099) https://exchange.xforce.ibmcloud.com/vulnerabilities/47099
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.