PT-2005-3716 · Slimftpd · Slimftpd

Publicado 2005-09-08 · Atualizado 2008-09-05 · CVE-2005-2850

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SlimFTPd version 3.17

Description The issue allows remote attackers to cause a denial of service, potentially due to a buffer overflow or off-by-one error, by sending certain commands. Specifically, the (1) USER and (2) PASS commands can be used to exploit this issue.

Recommendations For SlimFTPd version 3.17, consider disabling the handling of USER and PASS commands as a temporary workaround until a patch is available. Restrict access to the FTP server to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-2850

Produtos afetados

Slimftpd

Referências · 5

• 🔥 http://critical.lt/?vulnerabilities/8 · Exploit
• 🔥 https://exploit-db.com/exploits/26219 · Exploit
• 🔥 http://securitytracker.com/id?1014831 · Exploit
• 🔥 http://critical.lt/research/slimftpd_dos2.c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2850 · Nota de Segurança