PT-2005-4440 · Freeftpd · Freeftpd

Barabas · Publicado 2005-11-19 · Atualizado 2017-07-11 · CVE-2005-3684

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions freeFTPd version 1.0.8

Description The issue concerns buffer overflows that can be triggered by remote authenticated attackers. This can lead to a denial of service, causing the application to crash, and potentially allow the execution of arbitrary code. The overflows are caused by long MKD and DELE commands.

Recommendations For freeFTPd version 1.0.8, consider disabling the MKD and DELE commands as a temporary workaround until a patch is available. Restrict access to these commands to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-3684

Produtos afetados

Freeftpd

Referências · 8

• 🔥 https://exploit-db.com/exploits/1330 · Exploit
• http://vupen.com/english/advisories/2005/2471 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23118 · Nota
• http://marc.info/?l=full-disclosure&m=113222358007499&w=2 · Nota
• http://secunia.com/advisories/17624 · Nota
• http://osvdb.org/20909 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-3684 · Nota de Segurança
• http://securityfocus.com/bid/15486 · Nota