CVE-2005-3524 Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command.
HighCVSS 10.0
EPSS 21.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux-ftpd-ssl | = 0.17 | No fix listed |
| debian/linux-ftpd-ssl(Debian:12) | < 0.17.18+0.3-5 | 0.17.18+0.3-5 |
References
- Debian Security Tracker CVE-2005-3524 vendor-advisory
- bugs.debian.org issue-tracking
- 20051105 linux-ftpd-ssl 0.17 warez exploit mailing-list
- 17465 third-party-advisory
- 17529 third-party-advisory
- 17586 third-party-advisory
- DSA-896 vendor-advisory
- 20530 vdb-entry
- 15343 vdb-entry
- ADV-2005-2330 vdb-entry
- Linux-ftpd-ssl-vsprintf-bo(23016) vdb-entry