CVE-2011-5166 Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8)...
HighCVSS 7.5
EPSS 6.5%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8) STRU, (9) MODE, (10) RETR, (11) STOR, (12) APPE, (13) ALLO, (14) REST, (15) RNFR, (16) RNTO, (17) ABOR, (18) DELE, (19) CWD, (20) LIST, (21) NLST, (22) SITE, (23) STST, (24) HELP, (25) NOOP, (26) MKD, (27) RMD, (28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| elif keir knftp | = 1.0.0 | No fix listed |
References
- 20110902 KnFTPd v1.0.0 Multiple Command Remote Buffer Overflow exploit mailing-list
- 45907 third-party-advisory vendor-advisory
- 17819 exploit
- 17856 exploit
- 17870 exploit
- 18089 exploit
- 75147 vdb-entry
- knftpd-multiple-commands-bo(69557) vdb-entry