4 matches found
CVE-2004-2418
CVE-2004-2418 is a buffer overflow in SlimFTPd up to version 3.15 that allows a local user to execute arbitrary code by sending a very long FTP command. Affected commands include CWD, STOR, MKD, and STAT . The initial description confirms local-exploit risk with arbitrary code execution; connecte...
CVE-2005-2373
Summary: CVE-2005-2373 affects SlimFTPd, with a buffer overflow in 3.15 and 3.16 triggered by long directory names in certain FTP commands (LIST, and commonly cited DELE/RNFR). The flaw allows remote code execution and requires authenticated access. Root cause: insufficient bounds checking on com...
CVE-2005-2850
CVE-2005-2850 affects SlimFTPd 3.17. The vulnerability allows a remote attacker to cause a denial of service (crash) by sending certain USER and PASS commands, with indications pointing to a possible buffer overflow or off-by-one error. The available documents confirm the affected software/versio...
CVE-2001-1131
The CVE-2001-1131 entry documents a directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2. The issue allows an attacker to read arbitrary files and directories via a modified dot dot (..) in the CD command, yielding partial confidentiality impact as per the NVD metrics. No specif...