PT-2012-6186

CVE-2012-5905

·

Published

2012-11-17

·

Updated

2017-08-29

Description by

CVSS 2.0
4.0
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions KnFTPd version 1.0.0
Description The issue allows remote authenticated users to cause a denial of service, resulting in a crash, by sending a long string in a FEAT command.
Recommendations For KnFTPd version 1.0.0, consider restricting access to the FEAT command until a patch is available to prevent potential denial of service attacks.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2012-5905
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com