CVE-2013-0130

Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause a denial of service (application crash) via a long directory name in a (1) DELE, (2) LIST, or (3) VIEW command.

Score

CVSS 2.0 5.1 Medium

Status

Modified - cret@cert.org

Published

2013-03-29

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Coreftp (Coreftp)

References

• http://www.coreftp.com/forums/viewtopic.php?t=222102
• http://www.kb.cert.org/vuls/id/370868