PT-2007-3394 · Bftpd · Bftpd

Publicado 2007-04-16 · Atualizado 2011-03-08 · CVE-2007-2051

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions bftpd versions prior to 1.8

Description The issue is related to a buffer overflow in the parsecmd function, which has unknown impact and attack vectors. It is associated with the confstr variable.

Recommendations For versions prior to 1.8, update to version 1.8 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2051

Produtos afetados

Bftpd

Referências · 4

• http://sourceforge.net/project/shownotes.php?release_id=500238&group_id=32077 · Correção
• http://osvdb.org/34890 · Nota
• http://vupen.com/english/advisories/2007/1347 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2051 · Nota de Segurança