CVE-2002-0600 Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kth kerberos | = 4_1.0.2 | No fix listed |
| kth kerberos | = 4_1.0.3 | No fix listed |
| kth kerberos | = 4_1.0.4 | No fix listed |
| kth kerberos | = 4_1.1.1 | No fix listed |
| luke mewburn lukemftp | = 1.5 | No fix listed |
References
- 20020424 A bug in the Kerberos4 ftp client may cause heap overflow which leads to remote code execution mailing-list vendor-advisory
- kerberos4-ftp-client-overflow(8938) vdb-entry vendor-advisory
- 4592 vdb-entry