CVE-2002-1522 Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.
MediumCVSS 5.0
EPSS 13.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cooolsoft powerftp | = 2.03 | No fix listed |
| cooolsoft powerftp | = 2.10 | No fix listed |
| cooolsoft powerftp | = 2.23 | No fix listed |
| cooolsoft powerftp | = 2.24 | No fix listed |
References
- 20021005 Vulnerabilitie in PowerFTP server exploit mailing-list
- 20021012 Coolsoft PowerFTP <= v2.24 Denial of Service (Linux Source) mailing-list
- powerftp-long-username-dos(10286) vdb-entry vendor-advisory
- 5899 exploit vdb-entry vendor-advisory