Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 29/01/2009 Updated: 29/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote malicious users to cause a denial of service (persistent daemon crash) and possibly execute arbitrary code via a long string in a licensing key (aka .key) file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ftpshell ftpshell server 4.3

#!/usr/bin/perl # # Title: FTPShell Server 43 (licence key) Remote Buffer Overflow PoC # # Summary: FTPShell server is a windows FTP service that enables remote file downloads and uploads # It supports regular and secure FTP based on both SSL/TLS and SSH2 It is also extremely easy to # configure and use # # Product web page: wwwftpshell ...

CWE-119 http://osvdb.org/51510 http://secunia.com/advisories/33597 https://www.exploit-db.com/exploits/7852 https://nvd.nist.gov https://www.exploit-db.com/exploits/7852/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-0349

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect