CVE-2004-2418 Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1) CWD, (2) STOR, (3) MKD, and (4) STAT.
HighCVSS 7.2
EPSS 1.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1) CWD, (2) STOR, (3) MKD, and (4) STAT.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| whitsoft development slimftpd | = 3.15 | No fix listed |
References
- 20041110 [Advisory + Exploit] SlimFTPd <= 3.15 exploit mailing-list
- 13161 patch third-party-advisory vendor-advisory
- 1012167 exploit patch vdb-entry
- 11604 patch vdb-entry
- 11645 patch vdb-entry
- www.whitsoftdev.com url-repurposed vendor-advisory
- slimftpd-multiple-command-bo(18014) vdb-entry