Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-7573
HistoryMar 01, 2018 - 5:29 p.m.

Code injection

2018-03-0117:29:00
PRIOn knowledge base
www.prio-n.com
3

9.5 High

AI Score

Confidence

High

0.887 High

EPSS

Percentile

98.7%

An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of ‘F’ in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465.

CPENameOperatorVersion
ftpshell_clienteq6.70

9.5 High

AI Score

Confidence

High

0.887 High

EPSS

Percentile

98.7%