CVE-2011-5166

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the 1 USER, 2 PASS, 3 REIN, 4 QUIT, 5 PORT, 6 PASV, 7 TYPE, 8 STRU, 9 MODE, 10 RETR, 11 STOR, 12 APPE, 13 ALLO, 14 REST, 15 RNFR, 16 RNTO, 17 ABOR, 18 DELE, 19 CWD, 20 LIST, ...

CVE-2011-5166

CVE-2011-5166 affects KnFTP/KnFTPd 1.0.0. It describes multiple stack-based buffer overflows triggered by abnormally long strings passed to a wide range of FTP commands (USER, PASS, REIN, QUIT, PORT, PASV, TYPE, STRU, MODE, RETR, STOR, APPE, ALLO, REST, RNFR, RNTO, ABOR, DELE, CWD, LIST, NLST, SI...