Lucene search

[email protected]CVE-2001-0702

HistorySep 20, 2001 - 4:00 a.m.

CVE-2001-0702

2001-09-2004:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0702

cerberus ftp

version 1.5

remote attack

denial of service

arbitrary code execution.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.0%

JSON

Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, or (3) PASV command.

Affected configurations

NVD

Node

grant_averettceberus_ftp_serverMatch1.0

grant_averettceberus_ftp_serverMatch1.1

grant_averettceberus_ftp_serverMatch1.01

grant_averettceberus_ftp_serverMatch1.2

grant_averettceberus_ftp_serverMatch1.3

grant_averettceberus_ftp_serverMatch1.5

grant_averettceberus_ftp_serverMatch1.22

CPENameOperatorVersion
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.0
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.1
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.01
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.2
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.3
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.5
grant_averett:ceberus_ftp_servergrant averett ceberus ftp servereq1.22

CPE	Name	Operator	Version
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.0
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.1
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.01
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.2
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.3
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.5
grant_averett:ceberus_ftp_server	grant averett ceberus ftp server	eq	1.22

References

archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html

www.securityfocus.com/archive/1/192655

www.securityfocus.com/bid/2901

exchange.xforce.ibmcloud.com/vulnerabilities/6728

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.0%

JSON

Related for CVE-2001-0702

cvelist1 nvd1