CVE-2005-2961 - Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the

CVE-2005-2961

Summary

Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.

References

http://secunia.com/advisories/17021/
http://secunia.com/advisories/17035
http://www.debian.org/security/2005/dsa-834
http://www.securityfocus.com/bid/14993
https://exchange.xforce.ibmcloud.com/vulnerabilities/22491

Vulnerable Configurations

cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.7.4:*:*:*:*:*:*:*
cpe:2.3:a:prozilla:prozilla_download_accelerator:1.3.7.4:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 11-07-2017 - 01:33)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	14993
debian	DSA-834
secunia	17021 17035
xf	prozilla-ftpsearch-bo(22491)

Last major update

11-07-2017 - 01:33

Published

05-10-2005 - 19:02

Last modified

11-07-2017 - 01:33