CVE-2002-2245 ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and...
MediumCVSS 5.0
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netbsd ftpd | = 1.5 | No fix listed |
| netbsd ftpd | = 1.5.1 | No fix listed |
| netbsd ftpd | = 1.5.2 | No fix listed |
| netbsd ftpd | = 1.5.3 | No fix listed |
| netbsd ftpd | = 1.6 | No fix listed |
References
No public references yet.