← back
CVE-2001-0247

CVE-2001-0247

EPSS 19.3%
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/20731unverifiedexploitdbwww.exploit-db.com/exploits/20732unverifiedexploitdbwww.exploit-db.com/exploits/20733unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.ascftp://patches.sgi.com/support/free/security/advisories/20010802-01-Phttp://archives.neohapsis.com/archives/freebsd/2001-04/0466.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/6332http://www.cert.org/advisories/CA-2001-07.htmlhttp://www.nai.com/research/covert/advisories/048.asphttp://www.securityfocus.com/bid/2548