CVE-2003-0755 Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command.
HighCVSS 10.0
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier allows remote attackers to execute arbitrary code by creating long directory names and listing them with a LIST command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gtkftpd gtkftp | = 1.0.2 | No fix listed |
| gtkftpd gtkftp | = 1.0.3 | No fix listed |
| gtkftpd gtkftp | = 1.0.4 | No fix listed |
References
- 20030826 gtkftpd[v1.0.4(and below)]: remote root buffer overflow exploit. exploit mailing-list vendor-advisory