CVE-2011-3976 Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) G...
MediumCVSS 6.8
EPSS 30.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) GETFILE in a ScriptFTP script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ammsoft scriptftp | = 3.3 | No fix listed |
References
- 46099 third-party-advisory vendor-advisory
- www.digital-echidna.org exploit url-repurposed
- 17876 exploit
- VU#440219 third-party-advisory us-government-resource
- 49707 exploit vdb-entry
- scriptftp-getlist-bo(69962) vdb-entry