medium6.5Public exploit code
CVE-2006-4318
Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Texas Imperial Software WFTPD 3.23 - SIZE Overflow (Metasploit)2010-06-22 · remote · windows · Verified
- Texas Imperial Software WFTPD 3.23 - 'SIZE' Remote Buffer Overflow2006-08-21 · remote · windows · Verified
Impact
Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Texas Imperial Software | Wftpd | Version 3.23 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/0608-exploits/wftpd_exp.c
- http://secunia.com/advisories/21547
- http://securitytracker.com/id?1016723
- http://www.osvdb.org/28134
- http://www.securityfocus.com/bid/19617
- http://www.vupen.com/english/advisories/2006/3357
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28523
- https://www.exploit-db.com/exploits/2233
- http://packetstormsecurity.org/0608-exploits/wftpd_exp.c
- http://secunia.com/advisories/21547
- http://securitytracker.com/id?1016723
- http://www.osvdb.org/28134
- http://www.securityfocus.com/bid/19617
- http://www.vupen.com/english/advisories/2006/3357
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28523
- https://www.exploit-db.com/exploits/2233