Lucene search

K
cve[email protected]CVE-2009-0349
HistoryJan 29, 2009 - 7:30 p.m.

CVE-2009-0349

2009-01-2919:30:00
CWE-119
web.nvd.nist.gov
27
cve-2009-0349
stack-based buffer overflow
ftpshell server 4.3
denial of service
remote attack
arbitrary code execution
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.126 Low

EPSS

Percentile

95.5%

Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (persistent daemon crash) and possibly execute arbitrary code via a long string in a licensing key (aka .key) file.

Affected configurations

NVD
Node
ftpshellftpshell_serverMatch4.3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.126 Low

EPSS

Percentile

95.5%