Lucene search

K
freebsdFreeBSD20BE2982-4AAE-11D8-96F2-0020ED76EF5A
HistoryJan 06, 2004 - 12:00 a.m.

fsp buffer overflow and directory traversal vulnerabilities

2004-01-0600:00:00
vuxml.freebsd.org
14

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.1%

The Debian
security team reported a pair of vulnerabilities in
fsp:

A vulnerability was discovered in fsp, client utilities
for File Service Protocol (FSP), whereby a remote user could
both escape from the FSP root directory (CAN-2003-1022), and
also overflow a fixed-length buffer to execute arbitrary
code (CAN-2004-0011).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfspd< 2.8.1.19UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.1%

Related for 20BE2982-4AAE-11D8-96F2-0020ED76EF5A