high7.5Public exploit code
CVE-2005-2767
Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.lsq) file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LeapFTP Client 2.7.3/2.7.4 - '.LSQ' File Remote Buffer Overflow (PoC)2005-08-24 · dos · windows · Verified
Impact
Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.lsq) file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Leapware | Leapftp | Versions 2.7.3.600, 2.7.4, 2.7.4.602 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112491089723070&w=2
- http://secunia.com/advisories/16552/
- http://securitytracker.com/id?1014785
- http://secway.org/advisory/AD20050824.txt
- http://www.leapware.com/security/2005082301.txt
- http://www.securityfocus.com/bid/14655
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21974
- http://marc.info/?l=bugtraq&m=112491089723070&w=2
- http://secunia.com/advisories/16552/
- http://securitytracker.com/id?1014785
- http://secway.org/advisory/AD20050824.txt
- http://www.leapware.com/security/2005082301.txt
- http://www.securityfocus.com/bid/14655
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21974