PT-2003-2110 · Plug Play · Plug/Play Web Server

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1158

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Plug and Play Web Server version 1.0002c

Description The issue is related to multiple buffer overflows in the FTP service, which can be exploited by remote attackers to cause a denial of service (crash) by sending long commands, including dir, ls, delete, mkdir, DELE, RMD, or MKD commands.

Recommendations For Plug and Play Web Server version 1.0002c, consider disabling the FTP service until a patch is available to prevent potential denial of service attacks. Restrict access to the FTP service to minimize the risk of exploitation. Avoid using long commands in the FTP service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2003-1158

Produtos afetados

Plug/Play Web Server

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-09/0275.html · Exploit
• 🔥 http://securityfocus.com/bid/8667 · Exploit
• 🔥 https://exploit-db.com/exploits/23166 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1158 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13219 · Nota