CVE search · CVE-2011-5164
CVE-2011-5164
high 9.3
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-119
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | high 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- vandyke · absoluteftp
References
- http://secunia.com/advisories/46781Vendor Advisory
- http://www.exploit-db.com/exploits/18102Exploit
- http://www.osvdb.org/77105
- http://www.saintcorporation.com/cgi-bin/exploit_info/vandyke_absoluteftp_list_client_overflow
- http://www.securityfocus.com/bid/50614
- http://secunia.com/advisories/46781Vendor Advisory
- http://www.exploit-db.com/exploits/18102Exploit
- http://www.osvdb.org/77105
- http://www.saintcorporation.com/cgi-bin/exploit_info/vandyke_absoluteftp_list_client_overflow
- http://www.securityfocus.com/bid/50614