CVE-2005-1873 - Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers t

CVE-2005-1873

Summary

Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP command with a large string followed by the RMD command with a long string or (2) a globbing ("*") character followed by a long string.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034426.html
http://secunia.com/advisories/15585
http://security.lss.hr/index.php?page=details&ID=LSS-2005-06-06

Vulnerable Configurations

cpe:2.3:a:crob:crob_ftp:3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:crob:crob_ftp:3.6.1:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 10-09-2008 - 19:40)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

fulldisc	20050606 Crob FTP Server remote buffer overflows
misc	http://security.lss.hr/index.php?page=details&ID=LSS-2005-06-06
secunia	15585

Last major update

10-09-2008 - 19:40

Published

09-06-2005 - 04:00

Last modified

10-09-2008 - 19:40