9
CVSSv2

CVE-2008-4452

Published: 06/10/2008 Updated: 29/09/2017
CVSS v2 Base Score: 9 | Impact Score: 8.5 | Exploitability Score: 10
VMScore: 905
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:C

Vulnerability Summary

Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote malicious users to cause a denial of service (crash and hang) and possibly execute arbitrary code via a long CWD request.

Vulnerable Product Search on Vulmon Subscribe to Product

cambridge computer corporation vxftpsrv 2.0.3

Exploits

#!/usr/bin/perl ######################################################## # # vxFtpSrv 203 CWD command Overflow PoC # by Julien Bedard (wwwkosseclabcom) # info@kosseclabcom # # Tested on MS Windows Mobile 60 # (maybe other versions are vulnerable) # # vxftpsrv is the most common ftp # server for mobile devices: wm, ppc etc # it suffer of ...