PT-2001-1994 · Cesar · Cesarftp

Publicado 2001-11-22 · Atualizado 2008-09-10 · CVE-2001-0826

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CesarFTPD version 0.98b

Description The issue allows remote attackers to execute arbitrary commands due to buffer overflows. This can be achieved by providing long arguments to various commands, including HELP, USER, PASS, PORT, DELE, REST, RMD, or MKD.

Recommendations For CesarFTPD version 0.98b, consider restricting access to these commands or limiting the length of arguments passed to them as a temporary mitigation measure until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-0826

Produtos afetados

Cesarftp

Referências · 5

• 🔥 http://securityfocus.com/archive/1/[e-mail] · Exploit
• http://securityfocus.com/archive/1/20010630093621.66913.qmail%40web13002.mail.yahoo.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0826 · Nota de Segurança
• http://securityfocus.com/bid/2972 · Aviso do Fabricante
• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html · Nota