CVE-2013-10042

概要

参考情報

• raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freeftpd_pass.rb · Exploit
• exploit-db.com/exploits/27747 · Exploit
• vulncheck.com/advisories/freeftpd-pass-command-stack-based-buffer-overflow · Third Party Advisory

freeftpd のその他の脆弱性

• CVE-2019-19383高 8.8freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled).
• CVE-2012-6067緊急 10.0freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an O…
• CVE-2006-2407高 7.5Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) Fre…
• CVE-2005-3812中 6.8freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT command with missing …
• CVE-2005-3684高 7.5Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a denial of service (app…