7.5
CVSSv2

CVE-2005-1873

Published: 09/06/2005 Updated: 10/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote malicious users to execute arbitrary code via (1) an FTP command with a large string followed by the RMD command with a long string or (2) a globbing ("*") character followed by a long string.

Vulnerable Product Search on Vulmon Subscribe to Product

crob crob ftp 3.6.1

Exploits

/* * CrobFTP remote stack overflow PoC * --------------------------------- * Tested on Crob FTP Server 361, Windows XP * * Coded by Leon Juranic <ljuranic@lsshr> * LSS Security / securitylsshr * */ #include <stdioh> #include <windowsh> #include <timeh> #pragma comment (lib,"ws2_32") char *fzz_r ...