PT-2007-3394 · Bftpd · Bftpd

Published 2007-04-16 · Updated 2011-03-08 · CVE-2007-2051

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions bftpd versions prior to 1.8

Description The issue is related to a buffer overflow in the parsecmd function, which has unknown impact and attack vectors. It is associated with the confstr variable.

Recommendations For versions prior to 1.8, update to version 1.8 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-2051

Affected Products

Bftpd

References · 4

• http://sourceforge.net/project/shownotes.php?release_id=500238&group_id=32077 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2051 · Security Note
• http://osvdb.org/34890 · Note
• http://vupen.com/english/advisories/2007/1347 · Note