CVE-2007-1014 Stack-based buffer overflow in VicFTPS before 5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long CWD command.
HighCVSS 10.0
EPSS 9.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in VicFTPS before 5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long CWD command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vicftps | = 3.9 | No fix listed |
References
- 33227 vdb-entry
- 24161 patch third-party-advisory vendor-advisory
- vicftps.50webs.com
- 22608 exploit patch vdb-entry
- ADV-2007-0648 vdb-entry
- vicftps-cwd-bo(32557) vdb-entry
- 3331 exploit