SlimFTPd LIST Command Buffer Overflow (CVE-2005-2373)

A buffer overflow vulnerability exists in SlimFTPd server. The vulnerability is due to insufficient bounds verification on certain FTP service commands. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted FTP LIST service command to the target server...

CVE-2005-2373

creationtimestamp| type| source ---|---|--- 2010-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16729 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/slimftpdlistconcat.rb 2025-02-06 03:13:38+00:00| see...

SlimFTPd LIST Concatenation Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SlimFTPd LIS...

SlimFTPd LIST Concatenation Overflow

This module exploits a stack buffer overflow in the SlimFTPd server. The flaw is triggered when a LIST command is received with an overly-long argument. This vulnerability affects all versions of SlimFTPd prior to 3.16 and was discovered by Raphael Rigo. This module requires Metasploit:...

CVE-2005-2373

Summary: CVE-2005-2373 affects SlimFTPd, with a buffer overflow in 3.15 and 3.16 triggered by long directory names in certain FTP commands (LIST, and commonly cited DELE/RNFR). The flaw allows remote code execution and requires authenticated access. Root cause: insufficient bounds checking on com...