PT-2003-1859
CVE-2003-0766
·
Publicado
2003-09-12
·
Atualizado
2017-04-29
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
FTP Desktop client versions 3.5 and earlier
Description:
The issue is related to multiple heap-based buffer overflows that can be triggered by remote malicious servers. This can occur through a long FTP banner, a long response to a
USER command, or a long response to a PASS command. This allows the malicious server to execute arbitrary code.Recommendations:
For FTP Desktop client versions 3.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾