CVE-2008-0702 Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long ar...
HighCVSS 9.3
EPSS 7.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| south river technologies titan ftp server | = 6.0.5.549 | No fix listed |
| south river technologies titan ftp server | = 6.03 | No fix listed |
References
- 28760 third-party-advisory vendor-advisory
- 3639 third-party-advisory
- 20080201 Titan FTP Server Remote Heap Overflow (USER/PASS) mailing-list
- 27568 vdb-entry
- ADV-2008-0393 vdb-entry
- 5036 exploit