Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2010-3187

Published: 30/08/2010 Updated: 28/11/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Ibm

Vulnerability Summary

Buffer overflow in ftpd in IBM AIX 5.3 and previous versions allows remote malicious users to execute arbitrary code via a long NLST command.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm aix

Exploits

Exploit DB: IBM AIX 5l - 'FTPd' Remote DES Hash
/* * IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition :> * * Should work on IBM AIX 51,52,53! probably on 4X too * * bug found & exploited by Kingcope * * Version 20 - July 2010 * ---------------------------------------------------------------------------- * Description: ...
Exploit DB: AIX5l with FTP-Server - Hash Disclosure
### AIXCOREDUMPPL --- ### --== ~ AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT ~ =-- ### CREATES COREDUMP INCLUDING THE ROOT USER HASH FROM /etc/security/passwd ### THE RESULT FILE IS SCRAMBLED - SEEK FOR DES LOOKING CRYPTO KEYS ### SUCCESSFULLY TESTED ON IBM AIX 51 ### DISCOVERED & EXPLOITED BY KINGCOPE ### JULY 2010 use IO::Socke ...

References

CWE-119http://www.ibm.com/support/docview.wss?uid=isg1IZ83252http://www.ibm.com/support/docview.wss?uid=isg1IZ83275http://seclists.org/fulldisclosure/2010/Jul/324http://securitytracker.com/id?1024368http://seclists.org/fulldisclosure/2010/Jul/317http://www.osvdb.org/66576http://www.exploit-db.com/exploits/14409/http://www.ibm.com/support/docview.wss?uid=isg1IZ83274http://www.exploit-db.com/exploits/14456/http://seclists.org/fulldisclosure/2010/Jul/337http://www.ibm.com/support/docview.wss?uid=isg1IZ83276http://seclists.org/fulldisclosure/2010/Jul/281http://aix.software.ibm.com/aix/efixes/security/ftpd_advisory.aschttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11697https://nvd.nist.govhttps://www.exploit-db.com/exploits/14456/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook