PT-2005-3716 · Slimftpd · Slimftpd

Published 2005-09-08 · Updated 2008-09-05 · CVE-2005-2850

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SlimFTPd version 3.17

Description The issue allows remote attackers to cause a denial of service, potentially due to a buffer overflow or off-by-one error, by sending certain commands. Specifically, the (1) USER and (2) PASS commands can be used to exploit this issue.

Recommendations For SlimFTPd version 3.17, consider disabling the handling of USER and PASS commands as a temporary workaround until a patch is available. Restrict access to the FTP server to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-2850

Affected Products

Slimftpd

References · 5

• 🔥 http://critical.lt/?vulnerabilities/8 · Exploit
• 🔥 https://exploit-db.com/exploits/26219 · Exploit
• 🔥 http://securitytracker.com/id?1014831 · Exploit
• 🔥 http://critical.lt/research/slimftpd_dos2.c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2850 · Security Note