Lucene search

[email protected]CVE-2001-0702

HistorySep 20, 2001 - 4:00 a.m.

CVE-2001-0702

2001-09-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0702

cerberus ftp

version 1.5

remote attack

denial of service

arbitrary code execution.

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, or (3) PASV command.

CPENameOperatorVersion
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.1
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.0
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.22
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.5
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.2
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.01
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.3

CPE	Name	Operator	Version
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.1
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.0
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.22
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.5
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.2
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.01
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.3

References

archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html

www.securityfocus.com/archive/1/192655

www.securityfocus.com/bid/2901

exchange.xforce.ibmcloud.com/vulnerabilities/6728

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON