Lucene search

K
freebsdFreeBSD290D81B9-80F1-11D8-9645-0020ED76EF5A
HistoryMar 04, 2004 - 12:00 a.m.

oftpd denial-of-service vulnerability (PORT command)

2004-03-0400:00:00
vuxml.freebsd.org
18

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.014

Percentile

86.6%

Philippe Oechslin reported a denial-of-service vulnerability
in oftpd. The oftpd server can be crashed by sending a PORT
command containing an integer over 8 bits long (over 255).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchoftpd< 0.3.7UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.014

Percentile

86.6%

Related for 290D81B9-80F1-11D8-9645-0020ED76EF5A