critical9.3Public exploit code
CVE-2009-3976
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ProFTP 2.9 - Banner Remote Buffer Overflow (Metasploit)2010-07-03 · remote · windows · Verified
- ProFTP 2.9 - Welcome Message Remote Buffer Overflow (Metasploit)2009-08-25 · remote · windows · Verified
Impact
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Labtam-Inc | Proftp | Version 2.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/9508
- http://www.securityfocus.com/bid/36128
- http://www.vupen.com/english/advisories/2009/2414
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52730
- http://www.exploit-db.com/exploits/9508
- http://www.securityfocus.com/bid/36128
- http://www.vupen.com/english/advisories/2009/2414
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52730