high7.5Public exploit code
CVE-2001-0702
Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cerberus FTP Server 1.x - Buffer Overflow (Denial of Service) (PoC)2001-06-21 · dos · windows · Verified
Impact
Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, or (3) PASV command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grant Averett | Ceberus Ftp Server | Versions 1.0, 1.1, 1.01, 1.2, 1.3, 1.5 |
References
- NVD record
- CVE.org record
- http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html
- http://www.securityfocus.com/archive/1/192655
- http://www.securityfocus.com/bid/2901
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6728
- http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html
- http://www.securityfocus.com/archive/1/192655
- http://www.securityfocus.com/bid/2901
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6728