CVE-2005-2373 Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.
HighCVSS 7.2
EPSS 45.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| whitsoft development slimftpd | = 3.15 | No fix listed |
| whitsoft development slimftpd | = 3.16 | No fix listed |
References
- 20050721 Arbitrary code execution in SlimFTPd v3.16 mailing-list
- 16177 third-party-advisory
- 1014542 vdb-entry
- www.whitsoftdev.com url-repurposed