Lucene search

K
saintSAINT CorporationSAINT:3C63B2AD63630BFDDCA758E4396799B8
HistoryDec 08, 2005 - 12:00 a.m.

FreeFTPd user name buffer overflow

2005-12-0800:00:00
SAINT Corporation
download.saintcorporation.com
32

EPSS

0.709

Percentile

98.1%

Added: 12/08/2005
CVE: CVE-2005-3683
BID: 15457
OSVDB: 20909

Background

FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms.

Problem

An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command.

Resolution

Upgrade to the latest version of FreeFTPd.

References

<http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0510.html&gt;

Platforms

Windows 2000
Windows XP

EPSS

0.709

Percentile

98.1%