critical10.0
CVE-2003-0041
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.
Impact
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mit | Kerberos Ftp Client | All versions |
| Redhat | Linux | Versions 6.2, 7.0, 7.1, 7.2, 7.3, 8.0 |
| Mandrakesoft | Mandrake Multi Network Firewall | Version 8.2 |
| Mandrakesoft | Mandrake Linux | Versions 8.1, 8.2, 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html
- http://secunia.com/advisories/7979
- http://secunia.com/advisories/8114
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:021
- http://www.redhat.com/support/errata/RHSA-2003-020.html
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html
- http://secunia.com/advisories/7979
- http://secunia.com/advisories/8114
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:021
- http://www.redhat.com/support/errata/RHSA-2003-020.html