漏洞信息详情
CaesarFTPD FTP命令缓冲区溢出漏洞
- CNNVD编号:CNNVD-200112-074
- 危害等级: 高危
- CVE编号:
CVE-2001-0826
- 漏洞类型:
缓冲区溢出
- 发布时间:
2001-12-06
- 威胁类型:
远程
- 更新时间:
2005-10-20
- 厂 商:
aclogic - 漏洞来源:
Reported to bugtra… -
漏洞简介
CesarFTPD 0.98b存在缓冲区溢出漏洞。远程攻击者可以借助以下超长参数执行任意命令:(1)HELP,(2)USER,(3)PASS,(4)PORT,(5)DELE,(6)REST,(7)RMD,或(8)MKD。
漏洞公告
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com
参考网址
来源: BID
名称: 2972
链接:http://www.securityfocus.com/bid/2972
来源: BUGTRAQ
名称: 20010630 cesarFTP v0.98b ‘HELP’ buffer overflow
链接:http://www.securityfocus.com/archive/1/20010630093621.66913.qmail@web13002.mail.yahoo.com
来源: BUGTRAQ
名称: 20010704 CesarFTPd, Cerberus FTPd
链接:http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html
受影响实体
© 版权声明
文章版权归作者所有,未经允许请勿转载。
THE END