PT-2003-1038 · Xftp+1 · Xftp+1

Knud Erik Højgaard · Publicado 2003-04-08 · Atualizado 2017-07-11 · CVE-2003-0203

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions moxftp versions 2.2 and earlier xftp (affected versions not specified)

Description The issue allows remote malicious FTP servers to execute arbitrary code via a long FTP banner, potentially leading to disruption of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely.

Recommendations For moxftp versions 2.2 and earlier, update to a version later than 2.2 to resolve the issue. For xftp, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-04099

CVE-2003-0203

DSA-281

Produtos afetados

Moxftp

Xftp

Referências · 12

• 🔥 https://exploit-db.com/exploits/22278 · Exploit
• 🔥 http://securityfocus.com/bid/6921 · Exploit
• http://derkeiler.com/Mailing-Lists/Full-Disclosure/2003-02/0338.html · Nota
• http://debian.org/security/2003/dsa-281 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11399 · Nota
• https://bdu.fstec.ru/vul/2015-04099 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2003-0203 · Nota de Segurança
• http://securitytracker.com/id?1006156 · Nota
• http://marc.info/?l=bugtraq&m=104610380126860&w=2 · Nota
• http://secunia.com/advisories/8136 · Nota
• http://debian.org/security/dsa-281 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0203 · Nota de Segurança