PT-2005-4440 · Freeftpd · Freeftpd

Barabas · Published 2005-11-19 · Updated 2017-07-11 · CVE-2005-3684

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions freeFTPd version 1.0.8

Description The issue concerns buffer overflows that can be triggered by remote authenticated attackers. This can lead to a denial of service, causing the application to crash, and potentially allow the execution of arbitrary code. The overflows are caused by long MKD and DELE commands.

Recommendations For freeFTPd version 1.0.8, consider disabling the MKD and DELE commands as a temporary workaround until a patch is available. Restrict access to these commands to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-3684

Affected Products

Freeftpd

References · 8

• 🔥 https://exploit-db.com/exploits/1330 · Exploit
• http://osvdb.org/20909 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-3684 · Security Note
• http://vupen.com/english/advisories/2005/2471 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23118 · Note
• http://marc.info/?l=full-disclosure&m=113222358007499&w=2 · Note
• http://secunia.com/advisories/17624 · Note
• http://securityfocus.com/bid/15486 · Note