CVE-2001-0247 Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, a...
HighCVSS 10.0
EPSS 19.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mit kerberos 5 | = 1.1.1 | No fix listed |
| mit kerberos 5 | = 1.2 | No fix listed |
| mit kerberos 5 | = 1.2.1 | No fix listed |
| mit kerberos 5 | = 1.2.2 | No fix listed |
| sgi irix | = 6.1 | No fix listed |
| sgi irix | = 6.5.1 | No fix listed |
| sgi irix | = 6.5.2m | No fix listed |
| sgi irix | = 6.5.3 | No fix listed |
| sgi irix | = 6.5.3f | No fix listed |
| sgi irix | = 6.5.3m | No fix listed |
| sgi irix | = 6.5.4 | No fix listed |
| sgi irix | = 6.5.5 | No fix listed |
| sgi irix | = 6.5.6 | No fix listed |
| sgi irix | = 6.5.7 | No fix listed |
| sgi irix | = 6.5.8 | No fix listed |
| sgi irix | = 6.5.10 | No fix listed |
| sgi irix | = 6.5.11 | No fix listed |
| freebsd | = 2.2 | No fix listed |
| freebsd | = 2.2.2 | No fix listed |
| freebsd | = 2.2.3 | No fix listed |
| freebsd | = 2.2.4 | No fix listed |
| freebsd | = 2.2.5 | No fix listed |
| freebsd | = 2.2.6 | No fix listed |
| freebsd | = 2.2.8 | No fix listed |
| freebsd | = 3.0 | No fix listed |
Show 26 more
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd | = 3.1 | No fix listed |
| freebsd | = 3.2 | No fix listed |
| freebsd | = 3.3 | No fix listed |
| freebsd | = 3.4 | No fix listed |
| freebsd | = 3.5 | No fix listed |
| freebsd | = 3.5.1 | No fix listed |
| freebsd | = 4.0 | No fix listed |
| freebsd | = 4.1 | No fix listed |
| freebsd | = 4.1.1 | No fix listed |
| freebsd | = 4.2 | No fix listed |
| netbsd | = 1.2.1 | No fix listed |
| netbsd | = 1.3 | No fix listed |
| netbsd | = 1.3.1 | No fix listed |
| netbsd | = 1.3.2 | No fix listed |
| netbsd | = 1.3.3 | No fix listed |
| netbsd | = 1.4 | No fix listed |
| netbsd | = 1.4.1 | No fix listed |
| netbsd | = 1.4.2 | No fix listed |
| netbsd | = 1.4.3 | No fix listed |
| netbsd | = 1.5 | No fix listed |
| OpenBSD | = 2.3 | No fix listed |
| OpenBSD | = 2.4 | No fix listed |
| OpenBSD | = 2.5 | No fix listed |
| OpenBSD | = 2.6 | No fix listed |
| OpenBSD | = 2.7 | No fix listed |
| OpenBSD | = 2.8 | No fix listed |
References
- FreeBSD-SA-01:33 patch vendor-advisory
- CA-2001-07 patch third-party-advisory us-government-resource
- 20010409 Globbing Vulnerabilities in Multiple FTP Daemons vendor-advisory
- 2548 exploit patch vdb-entry vendor-advisory
- ftp-glob-expansion(6332) vdb-entry