Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.

Vulnerable Product	Search on Vulmon	Subscribe to Product
crystal art software crystal ftp 2.7
crystal art software crystal ftp 2.8
crystal art software crystal ftp 2.5
crystal art software crystal ftp 2.6
crystal art software crystal ftp 2.4

/* * CrystalFTP Pro v28 Buffer Overflow Exploit * * 04/25/2005 * * despite the fact that nobody uses CrystalFTP * i had to release a new version that replaces * the first one * * this overwrites the structured exception handler * with a "pop edx pop eax ret" in kernel32dll * this takes us to a pointer of the next SEH * just jmp ove ...

NVD-CWE-Other http://secunia.com/advisories/13583/http://www.securityfocus.com/bid/12038 http://marc.info/?l=bugtraq&m=110356203624337&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/18594 https://nvd.nist.gov https://www.exploit-db.com/exploits/711/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-1327

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect