PT-2003-1859
CVE-2003-0766
·
Published
2003-09-12
·
Updated
2017-04-29
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
FTP Desktop client versions 3.5 and earlier
Description:
The issue is related to multiple heap-based buffer overflows that can be triggered by remote malicious servers. This can occur through a long FTP banner, a long response to a
USER command, or a long response to a PASS command. This allows the malicious server to execute arbitrary code.Recommendations:
For FTP Desktop client versions 3.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾