CVE-2011-5166

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-5166

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

M

ultiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8) STRU, (9) MODE, (10) RETR, (11) STOR, (12) APPE, (13) ALLO, (14) REST, (15) RNFR, (16) RNTO, (17) ABOR, (18) DELE, (19) CWD, (20) LIST, (21) NLST, (22) SITE, (23) STST, (24) HELP, (25) NOOP, (26) MKD, (27) RMD, (28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands.

References
Link Resource
http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html Exploit
http://secunia.com/advisories/45907 Vendor Advisory
http://www.exploit-db.com/exploits/17819 Exploit
http://www.exploit-db.com/exploits/17856 Exploit
http://www.exploit-db.com/exploits/17870 Exploit
http://www.exploit-db.com/exploits/18089 Exploit
http://www.osvdb.org/75147
https://exchange.xforce.ibmcloud.com/vulnerabilities/69557
http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html Exploit
http://secunia.com/advisories/45907 Vendor Advisory
http://www.exploit-db.com/exploits/17819 Exploit
http://www.exploit-db.com/exploits/17856 Exploit
http://www.exploit-db.com/exploits/17870 Exploit
http://www.exploit-db.com/exploits/18089 Exploit
http://www.osvdb.org/75147
https://exchange.xforce.ibmcloud.com/vulnerabilities/69557
Configurations

Configuration 1 (hide)

cpe:2.3:a:elif_keir:knftp:1.0.0:*:*:*:*:*:*:*
History

21 Nov 2024, 01:33

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html - Exploit () http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html - Exploit
References () http://secunia.com/advisories/45907 - Vendor Advisory () http://secunia.com/advisories/45907 - Vendor Advisory
References () http://www.exploit-db.com/exploits/17819 - Exploit () http://www.exploit-db.com/exploits/17819 - Exploit
References () http://www.exploit-db.com/exploits/17856 - Exploit () http://www.exploit-db.com/exploits/17856 - Exploit
References () http://www.exploit-db.com/exploits/17870 - Exploit () http://www.exploit-db.com/exploits/17870 - Exploit
References () http://www.exploit-db.com/exploits/18089 - Exploit () http://www.exploit-db.com/exploits/18089 - Exploit
References () http://www.osvdb.org/75147 - () http://www.osvdb.org/75147 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/69557 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/69557 -
Information

Published : 2012-09-15 17:55

Updated : 2025-04-11 00:51

NVD link : CVE-2011-5166

Mitre link : CVE-2011-5166

CVE.ORG link : CVE-2011-5166

JSON object : View

Products Affected

elif_keir

CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer