CVE-2007-0825 FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possi...
HighCVSS 7.8
EPSS 3.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flashfxp | = 3.4.0_build_1145 | No fix listed |
References
- 35796 vdb-entry
- 22433 vdb-entry
- flashfxp-pwdcommand-dos(32416) vdb-entry
- 3276 exploit