Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4221
HistoryNov 09, 2010 - 12:00 a.m.

CVE-2010-4221

2010-11-0900:00:00
ubuntu.com
ubuntu.com
29

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.964 High

EPSS

Percentile

99.6%

Multiple stack-based buffer overflows in the pr_netio_telnet_gets function
in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute
arbitrary code via vectors involving a TELNET IAC escape character to a (1)
FTP or (2) FTPS server.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchproftpd-dfsg< 1.3.2c-1ubuntu0.1UNKNOWN
ubuntu10.10noarchproftpd-dfsg< 1.3.2e-4ubuntu0.1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.964 High

EPSS

Percentile

99.6%