PT-2003-1038 · Xftp+1 · Xftp+1

Knud Erik Højgaard · Published 2003-04-08 · Updated 2017-07-11 · CVE-2003-0203

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions moxftp versions 2.2 and earlier xftp (affected versions not specified)

Description The issue allows remote malicious FTP servers to execute arbitrary code via a long FTP banner, potentially leading to disruption of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely.

Recommendations For moxftp versions 2.2 and earlier, update to a version later than 2.2 to resolve the issue. For xftp, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-04099

CVE-2003-0203

DSA-281

Affected Products

Moxftp

Xftp

References · 12

• 🔥 https://exploit-db.com/exploits/22278 · Exploit
• 🔥 http://securityfocus.com/bid/6921 · Exploit
• http://debian.org/security/2003/dsa-281 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04099 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2003-0203 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0203 · Security Note
• http://derkeiler.com/Mailing-Lists/Full-Disclosure/2003-02/0338.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11399 · Note
• http://securitytracker.com/id?1006156 · Note
• http://marc.info/?l=bugtraq&m=104610380126860&w=2 · Note
• http://secunia.com/advisories/8136 · Note
• http://debian.org/security/dsa-281 · Note