Debian Security Bug TrackerDEBIANCVE:CVE-2014-1693CVE-2014-1693
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.7%
Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the (1) user, (2) account, (3) cd, (4) ls, (5) nlist, (6) rename, (7) delete, (8) mkdir, (9) rmdir, (10) recv, (11) recv_bin, (12) recv_chunk_start, (13) send, (14) send_bin, (15) send_chunk_start, (16) append_chunk_start, (17) append, or (18) append_bin command.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | erlang | < 1:16.b.3.1-dfsg-3 | erlang_1:16.b.3.1-dfsg-3_all.deb |
| Debian | 11 | all | erlang | < 1:16.b.3.1-dfsg-3 | erlang_1:16.b.3.1-dfsg-3_all.deb |
| Debian | 10 | all | erlang | < 1:16.b.3.1-dfsg-3 | erlang_1:16.b.3.1-dfsg-3_all.deb |
| Debian | 999 | all | erlang | < 1:16.b.3.1-dfsg-3 | erlang_1:16.b.3.1-dfsg-3_all.deb |
| Debian | 13 | all | erlang | < 1:16.b.3.1-dfsg-3 | erlang_1:16.b.3.1-dfsg-3_all.deb |
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.7%