critical9.3Public exploit code
CVE-2008-0702
Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and poss…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Titan FTP Server 6.03 - 'USER/PASS' Remote Heap Overflow (PoC)2008-02-02 · dos · windows · Verified
Impact
Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| South River Technologies | Titan Ftp Server | Versions 6.0.5.549, 6.03 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28760
- http://securityreason.com/securityalert/3639
- http://www.securityfocus.com/archive/1/487431/100/0/threaded
- http://www.securityfocus.com/bid/27568
- http://www.vupen.com/english/advisories/2008/0393
- https://www.exploit-db.com/exploits/5036
- http://secunia.com/advisories/28760
- http://securityreason.com/securityalert/3639
- http://www.securityfocus.com/archive/1/487431/100/0/threaded
- http://www.securityfocus.com/bid/27568
- http://www.vupen.com/english/advisories/2008/0393
- https://www.exploit-db.com/exploits/5036