PT-2007-2879 · Qftp+1 · Qftp+1

Published 2007-03-16 · Updated 2024-08-07 · CVE-2007-1485

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LIBFtp version 3.1-1

Description A buffer overflow issue exists in the set umask function in QFTP, allowing local users to potentially execute arbitrary code via a long -m argument. However, it is noted that QFTP is not setuid, and it is unlikely that there are web interfaces to QFTP that would accept untrusted command line arguments.

Recommendations For LIBFtp version 3.1-1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1485

Affected Products

Libftp

Qftp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-1485 · Security Note
• http://securityreason.com/securityalert/2443 · Note
• http://securityfocus.com/bid/22986 · Note
• http://securityfocus.com/archive/1/462952/100/0/threaded · Note
• http://osvdb.org/35089 · Note
• https://t.me/cvenotify/89642 · Telegram Post