CVE-2011-0507

2011-01-2019:00:10

mitre

web.nvd.nist.gov

cve-2011-0507

denial of service

ftpservice.exe

blackmoon ftp 3.1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.1

Confidence

High

EPSS

0.023

Percentile

89.8%

JSON

FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large number of PORT commands with long arguments, which triggers a NULL pointer dereference. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

blackmoonftpserverblackmoon_ftp_serverMatch3.1

blackmoonftpserverblackmoon_ftp_serverMatch3.1.7.1735

blackmoonftpserverblackmoon_ftp_serverMatch3.1.7.1736

VendorProductVersionCPE
blackmoonftpserverblackmoon_ftp_server3.1cpe:2.3:a:blackmoonftpserver:blackmoon_ftp_server:3.1:*:*:*:*:*:*:*
blackmoonftpserverblackmoon_ftp_server3.1.7.1735cpe:2.3:a:blackmoonftpserver:blackmoon_ftp_server:3.1.7.1735:*:*:*:*:*:*:*
blackmoonftpserverblackmoon_ftp_server3.1.7.1736cpe:2.3:a:blackmoonftpserver:blackmoon_ftp_server:3.1.7.1736:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
blackmoonftpserver	blackmoon_ftp_server	3.1	cpe:2.3:a:blackmoonftpserver:blackmoon_ftp_server:3.1:::::::*
blackmoonftpserver	blackmoon_ftp_server	3.1.7.1735	cpe:2.3:a:blackmoonftpserver:blackmoon_ftp_server:3.1.7.1735:::::::*
blackmoonftpserver	blackmoon_ftp_server	3.1.7.1736	cpe:2.3:a:blackmoonftpserver:blackmoon_ftp_server:3.1.7.1736:::::::*