CVE-2011-5166

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8) STRU, (9) MODE, (10) RETR, (11) STOR, (12) APPE, (13) ALLO, (14) REST, (15) RNFR, (16) RNTO, (17) ABOR, (18) DELE, (19) CWD, (20) LIST, (21) NLST, (22) SITE, (23) STST, (24) HELP, (25) NOOP, (26) MKD, (27) RMD, (28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands.

🔗 References (16)

• cve@mitrehttp://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html
• cve@mitrehttp://secunia.com/advisories/45907
• cve@mitrehttp://www.exploit-db.com/exploits/17819
• cve@mitrehttp://www.exploit-db.com/exploits/17856
• cve@mitrehttp://www.exploit-db.com/exploits/17870
• cve@mitrehttp://www.exploit-db.com/exploits/18089
• cve@mitrehttp://www.osvdb.org/75147
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/69557
• af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/45907
• af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/17819
• af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/17856
• af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/17870
• af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/18089
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/75147