Lucene search

K
cve[email protected]CVE-2005-2373
HistoryJul 26, 2005 - 4:00 a.m.

CVE-2005-2373

2005-07-2604:00:00
web.nvd.nist.gov
25
cve-2005-2373
buffer overflow
slimftpd
remote code execution
directory name
authentication
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.078

Percentile

94.3%

Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.

Affected configurations

NVD
Node
whitsoft_developmentslimftpdMatch3.15
OR
whitsoft_developmentslimftpdMatch3.16
VendorProductVersionCPE
whitsoft_developmentslimftpd3.15cpe:/a:whitsoft_development:slimftpd:3.15:::
whitsoft_developmentslimftpd3.16cpe:/a:whitsoft_development:slimftpd:3.16:::

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.078

Percentile

94.3%