PT-2008-6253 · Karjasoft · Sami Ftp Server

Published 2008-11-17 · Updated 2018-10-11 · CVE-2008-5106

Mitre

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console. NOTE: this may overlap CVE-2006-0441 and CVE-2006-2212.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-5106

Affected Products

Sami Ftp Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-5106 · Security Note
• http://securityfocus.com/archive/1/488198/100/200/threaded · Note
• http://securityreason.com/securityalert/4603 · Note
• http://securityfocus.com/bid/27817 · Note