critical9.8Public exploit code
CVE-2017-6465
Remote Code Execution was discovered in FTPShell Client 6.53.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FTPShell Client 6.53 - Remote Buffer Overflow2017-03-04 · remote · windows · Verified
Impact
Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ftpshell | Ftpshell Client | Version 6.53 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/141456/FTPShell-Client-6.53-Buffer-Overflow.html
- http://www.securityfocus.com/bid/96570
- https://www.exploit-db.com/exploits/41511/
- http://packetstormsecurity.com/files/141456/FTPShell-Client-6.53-Buffer-Overflow.html
- http://www.securityfocus.com/bid/96570
- https://www.exploit-db.com/exploits/41511/