NetSight
IP …
critical10.0Public exploit code

CVE-2001-0247

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.

Affected products

VendorProductAffected versions
MitKerberos 5
Versions 1.1.1, 1.2, 1.2.1, 1.2.2
SgiIrix
Versions 6.1, 6.5.1, 6.5.2m, 6.5.3, 6.5.3f, 6.5.3m
FreebsdFreebsd
Versions 2.2, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6
NetbsdNetbsd
Versions 1.2.1, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.4
OpenbsdOpenbsd
Versions 2.3, 2.4, 2.5, 2.6, 2.7, 2.8

References