PT-2003-2110 · Plug Play · Plug/Play Web Server

Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1158

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Plug and Play Web Server version 1.0002c

Description The issue is related to multiple buffer overflows in the FTP service, which can be exploited by remote attackers to cause a denial of service (crash) by sending long commands, including dir, ls, delete, mkdir, DELE, RMD, or MKD commands.

Recommendations For Plug and Play Web Server version 1.0002c, consider disabling the FTP service until a patch is available to prevent potential denial of service attacks. Restrict access to the FTP service to minimize the risk of exploitation. Avoid using long commands in the FTP service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-1158

Affected Products

Plug/Play Web Server

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-09/0275.html · Exploit
• 🔥 http://securityfocus.com/bid/8667 · Exploit
• 🔥 https://exploit-db.com/exploits/23166 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1158 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13219 · Note