high7.5Public exploit code
CVE-2005-2961
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Prozilla 1.3.7.4 - 'ftpsearch' Results Handling Buffer Overflow2005-10-02 · remote · linux · Verified
Impact
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prozilla | Prozilla Download Accelerator | Version 1.3.7.4 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17021/
- http://secunia.com/advisories/17035
- http://www.debian.org/security/2005/dsa-834
- http://www.securityfocus.com/bid/14993
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22491
- http://secunia.com/advisories/17021/
- http://secunia.com/advisories/17035
- http://www.debian.org/security/2005/dsa-834
- http://www.securityfocus.com/bid/14993
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22491