CVE-2004-1332 Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.
HighCVSS 7.5
EPSS 9.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc hp-ux | = 10.01 | No fix listed |
| HP Inc hp-ux | = 10.10 | No fix listed |
| HP Inc hp-ux | = 10.20 | No fix listed |
| HP Inc hp-ux | = 10.24 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.4 | No fix listed |
| HP Inc hp-ux | = 11.11 | No fix listed |
| HP Inc hp-ux | = 11.11i | No fix listed |
| HP Inc hp-ux | = 11.22 | No fix listed |
| HP Inc hp-ux | = 11.23 | No fix listed |
| HP Inc hp-ux series 700 | = 10.20 | No fix listed |
| HP Inc hp-ux series 800 | = 10.20 | No fix listed |
| HP Inc sis | All versions | No fix listed |
| HP Inc vvos | = 10.24 | No fix listed |
| HP Inc vvos | = 11.04 | No fix listed |
References
- HPSBUX01118 vendor-advisory
- 13608 patch third-party-advisory
- 1012650 vdb-entry
- 20041221 Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability third-party-advisory
- VU#647438 patch third-party-advisory us-government-resource
- 12077 patch vdb-entry
- hp-ftpd-bo(18636) vdb-entry
- oval:org.mitre.oval:def:5701 signature vdb-entry