Lucene search

K
cve[email protected]CVE-2009-3484
HistorySep 30, 2009 - 3:30 p.m.

CVE-2009-3484

2009-09-3015:30:00
CWE-119
web.nvd.nist.gov
22
cve-2009-3484
core ftp
buffer overflow
arbitrary code execution
ftp server
site backup file

8.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.078 Low

EPSS

Percentile

94.2%

Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
coreftp:core_ftpcoreftp core ftpeq2.1

8.8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.078 Low

EPSS

Percentile

94.2%

Related for CVE-2009-3484