Lucene search

K
cveMitreCVE-2009-3364
HistorySep 24, 2009 - 4:30 p.m.

CVE-2009-3364

2009-09-2416:30:02
CWE-119
mitre
web.nvd.nist.gov
36
cve-2009-3364
ftpshell client
buffer overflow
remote code execution
ftp server
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.9

Confidence

High

EPSS

0.014

Percentile

86.3%

Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command.

Affected configurations

Nvd
Node
ftpshellftpshellMatch4.1rc2client
VendorProductVersionCPE
ftpshellftpshell4.1cpe:2.3:a:ftpshell:ftpshell:4.1:rc2:client:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.9

Confidence

High

EPSS

0.014

Percentile

86.3%