CVE-2003-0831

2003-11-1705:00:00

CWE-119

[email protected]

web.nvd.nist.gov

proftpd

ascii mode

buffer overflow

cve-2003-0831

nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.134 Low

EPSS

Percentile

95.6%

JSON

ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.

Affected configurations

NVD

Node

proftpd_projectproftpdMatch1.2.7

proftpd_projectproftpdMatch1.2.7_rc1

proftpd_projectproftpdMatch1.2.7_rc2

proftpd_projectproftpdMatch1.2.7_rc3

proftpd_projectproftpdMatch1.2.8

proftpd_projectproftpdMatch1.2.8_rc1

proftpd_projectproftpdMatch1.2.8_rc2

proftpd_projectproftpdMatch1.2.9_rc1

proftpd_projectproftpdMatch1.2.9_rc2

CPENameOperatorVersion
proftpd_project:proftpdproftpd project proftpdeq1.2.7
proftpd_project:proftpdproftpd project proftpdeq1.2.7_rc1
proftpd_project:proftpdproftpd project proftpdeq1.2.7_rc2
proftpd_project:proftpdproftpd project proftpdeq1.2.7_rc3
proftpd_project:proftpdproftpd project proftpdeq1.2.8
proftpd_project:proftpdproftpd project proftpdeq1.2.8_rc1
proftpd_project:proftpdproftpd project proftpdeq1.2.8_rc2
proftpd_project:proftpdproftpd project proftpdeq1.2.9_rc1
proftpd_project:proftpdproftpd project proftpdeq1.2.9_rc2

CPE	Name	Operator	Version
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.7
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.7_rc1
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.7_rc2
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.7_rc3
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.8
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.8_rc1
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.8_rc2
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.9_rc1
proftpd_project:proftpd	proftpd project proftpd	eq	1.2.9_rc2