7.5
CVSSv2

CVE-2005-0419

Published: 27/04/2005 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command.

Vulnerable Product Search on Vulmon Subscribe to Product

3com 3cserver 1.1

Exploits

/* subject: Proof of Concept exploit for 3CServer v11 FTP server vendor: 3Com, support3comcom/software/utilities_for_windows_32_bithtm `date`: Mon Feb 7 18:10:01 2005 notes: universal offset, SEH ptr overwriting with variation author: mandragore, mandragore@turingtest@gmailcom */ #include <stdioh> #include <strings ...