CVE-2011-5166

Summary

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8) STRU, (9) MODE, (10) RETR, (11) STOR, (12) APPE, (13) ALLO, (14) REST, (15) RNFR, (16) RNTO, (17) ABOR, (18) DELE, (19) CWD, (20) LIST, (21) NLST, (22) SITE, (23) STST, (24) HELP, (25) NOOP, (26) MKD, (27) RMD, (28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/45907
• http://www.exploit-db.com/exploits/17856
• http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html
• http://www.exploit-db.com/exploits/18089
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69557
• http://www.osvdb.org/75147
• http://www.exploit-db.com/exploits/17819
• http://www.exploit-db.com/exploits/17870

References

• http://secunia.com/advisories/45907
• http://www.exploit-db.com/exploits/17856
• http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html
• http://www.exploit-db.com/exploits/18089
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69557
• http://www.osvdb.org/75147
• http://www.exploit-db.com/exploits/17819
• http://www.exploit-db.com/exploits/17870

• ←Previous
• Next→