Lucene search

K
cveMitreCVE-2009-3976
HistoryNov 18, 2009 - 11:30 p.m.

CVE-2009-3976

2009-11-1823:30:00
CWE-119
mitre
web.nvd.nist.gov
22
cve-2009-3976
labtam proftp
buffer overflow
denial of service
remote execution
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.013

Percentile

86.3%

Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message).

Affected configurations

Nvd
Node
labtam-incproftpMatch2.9
VendorProductVersionCPE
labtam-incproftp2.9cpe:2.3:a:labtam-inc:proftp:2.9:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.013

Percentile

86.3%