Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2001-0489

Published: 27/06/2001 Updated: 03/05/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Format string vulnerability in gftp before 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.

Vulnerable Product Search on Vulmon Subscribe to Product

gftp gftp

Vendor Advisories

Debian Security Advisories: DSA-057-1 gftp -- printf format attack
The gftp package as distributed with Debian GNU/Linux 22 has a problem in its logging code: it logged data received from the network but it did not protect itself from printf format attacks An attacker can use this by making an FTP server return special responses that exploit this This has been fixed in version 206a-31, and we recommend that ...

References

NVD-CWE-Otherhttp://archives.neohapsis.com/archives/linux/redhat/2001-q2/0043.htmlhttp://archives.neohapsis.com/archives/vuln-dev/2001-q2/0231.htmlhttp://www.debian.org/security/2001/dsa-057http://www.securityfocus.com/bid/2657http://www.osvdb.org/1805https://exchange.xforce.ibmcloud.com/vulnerabilities/6478https://nvd.nist.govhttps://www.debian.org/security/./dsa-057
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310CVE-2024-21683CVE-2024-22187chromedeserializationXPath injectionCVE-2024-27842denial of serviceCVE-2024-24851googleCVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook