CVE-2012-5002 Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a....
MediumCVSS 6.8
EPSS 31.2%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ricoh dl-10 | = 4.5.0.1 | No fix listed |
| ricoh sr10 ftp server | = 1.1.0.6 | No fix listed |
References
- 47912 third-party-advisory vendor-advisory
- security.inshell.net exploit
- 79691 vdb-entry
- 52235 exploit vdb-entry
- ricoh-user-bo(73591) vdb-entry