critical9.3Public exploit code
CVE-2008-4321
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH)2008-08-17 · remote · windows · Verified
- FlashGet 1.9.0.1012 - 'FTP PWD Response' SEH Stack Overflow2008-08-15 · remote · windows · Verified
- FlashGet 1.9 - 'FTP PWD Response' Remote Buffer Overflow (PoC)2008-08-13 · dos · windows · Verified
Impact
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flashget | Flashget Ftp | Version 1.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31481
- http://securityreason.com/securityalert/4327
- http://www.securityfocus.com/bid/30685
- http://www.vupen.com/english/advisories/2008/2381
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44443
- https://www.exploit-db.com/exploits/6240
- https://www.exploit-db.com/exploits/6248
- https://www.exploit-db.com/exploits/6256
- http://secunia.com/advisories/31481
- http://securityreason.com/securityalert/4327
- http://www.securityfocus.com/bid/30685
- http://www.vupen.com/english/advisories/2008/2381
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44443
- https://www.exploit-db.com/exploits/6240
- https://www.exploit-db.com/exploits/6248
- https://www.exploit-db.com/exploits/6256