CVE-2011-5166

HOCH 7.5CVE-2011-5166 · Published 15/09/2012 · updated 16/06/2026

Kurz gesagt

CVE-2011-5166 ist eine Schwachstelle (HOCH (CVSS 7.5)) in knftp (elif keir).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.5%, höher als bei 93.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
knftp elif_keir	`= 1.0.0`	No fix yet

Description

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8) STRU, (9) MODE, (10) RETR, (11) STOR, (12) APPE, (13) ALLO, (14) REST, (15) RNFR, (16) RNTO, (17) ABOR, (18) DELE, (19) CWD, (20) LIST, (21) NLST, (22) SITE, (23) STST, (24) HELP, (25) NOOP, (26) MKD, (27) RMD, (28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands.

References

archives.neohapsis.com/archives/bugtraq/2011-09/0015.html · Exploit
secunia.com/advisories/45907 · Vendor Advisory
exploit-db.com/exploits/17819 · Exploit
exploit-db.com/exploits/17856 · Exploit
exploit-db.com/exploits/17870 · Exploit
exploit-db.com/exploits/18089 · Exploit
osvdb.org/75147
exchange.xforce.ibmcloud.com/vulnerabilities/69557

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free