CVE-2005-3683 Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USE...
HighCVSS 7.5
EPSS 71.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a long USER command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freeftpd | = 1.0 | No fix listed |
| freeftpd | = 1.0.1 | No fix listed |
| freeftpd | = 1.0.2 | No fix listed |
| freeftpd | = 1.0.3 | No fix listed |
| freeftpd | = 1.0.4 | No fix listed |
| freeftpd | = 1.0.5 | No fix listed |
| freeftpd | = 1.0.6 | No fix listed |
| freeftpd | = 1.0.7 | No fix listed |
| freeftpd | = 1.0.8 | No fix listed |
References
- freeftpd.com
- 20051116 freeftpd USER bufferoverflow mailing-list
- 20051116 re: freeftpd USER bufferoverflow mailing-list
- 17583 patch third-party-advisory vendor-advisory
- 1015230 vdb-entry vendor-advisory
- 20909 patch vdb-entry
- 15457 exploit vdb-entry
- ADV-2005-2458 vdb-entry
- freeftpd-multiple-command-bo(23118) vdb-entry