CVE-2007-5256 Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote attackers to execute arbitrary code via a long HELP command on TCP port 3010 to....
HighCVSS 7.5
EPSS 7.1%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote attackers to execute arbitrary code via a long HELP command on TCP port 3010 to the sysuser::exechelp function in sysuser.cc and (2) remote authenticated users to execute arbitrary code via long commands on TCP port 6809 to the servinterface::sendmulticast function in servinterface.cc, as demonstrated by a PIcallsign command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcdu fsd | = 2.052_d9 | No fix listed |
| mcdu fsd | = 3.000_d9 | No fix listed |
References
- aluigi.altervista.org exploit
- 27008 third-party-advisory vendor-advisory
- 27045 third-party-advisory vendor-advisory
- 3195 third-party-advisory
- 20071001 Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9 mailing-list
- 20071004 Re: Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9[EXPLOIT] mailing-list
- 25883 vdb-entry
- ADV-2007-3334 vdb-entry
- 4484 exploit