积极预防 及时发现
快速响应 力保恢复
CesarFTPD 0.98b中的缓冲区溢出允许远程攻击者通过传到(1) HELP, (2) USE...
发布时间:2001-12-06 信息来源:管理员

CNCVE编号:CNCVE-20010826 CVE编号:CAN-2001-0826 安全级别:高 漏洞中文描述: CesarFTPD 0.98b中的缓冲区溢出允许远程攻击者通过传到(1) HELP, (2) USER, (3) PASS,(4) PORT, (5) DELE, (6) REST, (7) RMD,或(8) MKD的长参数来执行任意命令。 漏洞英文描述: Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD. 漏洞参考: Reference: BUGTRAQ:20010630 cesarFTP v0.98b 'HELP' buffer overflow Reference: URL:http://www.securityfocus.com/archive/1/20010630093621.66913.qmail@web13002.mail.yahoo.com Reference: BUGTRAQ:20010704 CesarFTPd, Cerberus FTPd Reference: URL:http://w 系统类型: Unix/Linux Win95/98/ME Win2000/NT 漏洞类型:输入有效性检查错误