7.5
CVSSv2

CVE-2003-0766

Published: 17/09/2003 Updated: 29/04/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious servers to execute arbitrary code via (1) a long FTP banner, (2) a long response to a USER command, or (3) a long response to a PASS command.

Vulnerable Product Search on Vulmon Subscribe to Product

ftp desktop ftp desktop 3.5

Exploits

source: wwwsecurityfocuscom/bid/8560/info A buffer overflow vulnerability has been reported in FTP Desktop The vulnerability occurs when FTP Desktop is parsing 331 server responses from remote FTP servers When FTP Desktop receives an FTP 331 response exceeding a certain length, it will trigger the overflow condition This could allow fo ...
source: wwwsecurityfocuscom/bid/8559/info A buffer overflow vulnerability has been reported in FTP Desktop The vulnerability occurs when FTP Desktop is parsing 'Welcome' banner 220 messages from remote FTP servers When FTP Desktop receives an FTP banner exceeding a certain length, it will trigger the overflow condition This could allow ...