Buffer Overflow Vulnerability in FreeFTPd by freeFTPd
CVE-2005-3684

Currently unrated

Key Information:

Vendor

Freeftpd

Status
Vendor
CVE Published:
19 November 2005

What is CVE-2005-3684?

FreeFTPd 1.0.8 contains multiple buffer overflow vulnerabilities that can be exploited by remote authenticated attackers. When logging is disabled, attackers can execute long MKD and DELE commands, potentially leading to application crashes or arbitrary code execution. The lack of proper bounds checking allows these commands to overflow the buffer, resulting in a denial of service and various security risks.

References

EPSS Score

14% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.