7.5
CVSSv2

CVE-2003-0561

Published: 18/08/2003 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 765
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.

Vulnerable Product Search on Vulmon Subscribe to Product

iglooftp iglooftp pro 3.8

Exploits

source: wwwsecurityfocuscom/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities The issue likely presents itself due do a lack of sufficient bounds checking performed on data that is copied into a reserved internal memory buffer Remote arbitrary code execution has been c ...
source: wwwsecurityfocuscom/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities The issue likely presents itself due do a lack of sufficient bounds checking performed on data that is copied into a reserved internal memory buffer Remote arbitrary code execution has been con ...
source: wwwsecurityfocuscom/bid/8161/info A buffer overflow vulnerability has been reported in IglooFTP The vulnerability occurs when IglooFTP is parsing 'Welcome' banner messages from remote FTP servers When IglooFTP receives an FTP banner exceeding a certain length, it will trigger the overflow condition This could allow for executio ...