CVE-2011-0507 FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large numb...
MediumCVSS 4.3
EPSS 4.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large number of PORT commands with long arguments, which triggers a NULL pointer dereference. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackmoonftpserver blackmoon ftp server | = 3.1 | No fix listed |
| blackmoonftpserver blackmoon ftp server | = 3.1.7.1735 | No fix listed |
| blackmoonftpserver blackmoon ftp server | = 3.1.7.1736 | No fix listed |
References
- 70452 vdb-entry
- 42933 third-party-advisory vendor-advisory
- 15986 exploit
- 45814 vdb-entry
- blackmoon-port-bo(64696) vdb-entry