high7.5Public exploit code
CVE-2005-1873
Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP command with a larg…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Crob FTP Server 3.6.1 - Remote Stack Overflow2005-06-03 · remote · windows · Verified
Impact
Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP command with a large string followed by the RMD command with a long string or (2) a globbing ("*") character followed by a long string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crob | Crob Ftp | Version 3.6.1 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034426.html
- http://secunia.com/advisories/15585
- http://security.lss.hr/index.php?page=details&ID=LSS-2005-06-06
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034426.html
- http://secunia.com/advisories/15585
- http://security.lss.hr/index.php?page=details&ID=LSS-2005-06-06