Lucene search

K
freebsdFreeBSDCF0FB426-3F96-11D8-B096-0020ED76EF5A
HistorySep 23, 2003 - 12:00 a.m.

ProFTPD ASCII translation bug resulting in remote root compromise

2003-09-2300:00:00
vuxml.freebsd.org
17

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.134 Low

EPSS

Percentile

95.6%

A buffer overflow exists in the ProFTPD code that handles
translation of newline characters during ASCII-mode file
uploads. An attacker may exploit this buffer overflow by
uploading a specially crafted file, resulting in code
execution and ultimately a remote root compromise.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchproftpd< 1.2.8_1UNKNOWN

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.134 Low

EPSS

Percentile

95.6%

Related for CF0FB426-3F96-11D8-B096-0020ED76EF5A