NetSight
IP …
high7.5Public exploit code

CVE-2004-1327

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.

Affected products

VendorProductAffected versions
Crystal Art SoftwareCrystal Ftp
Versions 2.4, 2.5, 2.6, 2.7, 2.8

References