CVE-2010-4221

Exploit

EPSS 91.3%
Veröffentlicht 09.11.2010 21:00:06
Zuletzt bearbeitet 16.06.2026 23:24:23
Erkennungen
Login

Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 16

NVD 15 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Proftpd ≫ Proftpd Version 1.3.2

Proftpd ≫ Proftpd Version 1.3.2 Update a

Proftpd ≫ Proftpd Version 1.3.2 Update b

Proftpd ≫ Proftpd Version 1.3.2 Update c

Proftpd ≫ Proftpd Version 1.3.2 Update d

Proftpd ≫ Proftpd Version 1.3.2 Update e

Proftpd ≫ Proftpd Version 1.3.2 Update rc3

Proftpd ≫ Proftpd Version 1.3.2 Update rc4

Proftpd ≫ Proftpd Version 1.3.3

Proftpd ≫ Proftpd Version 1.3.3 Update a

Proftpd ≫ Proftpd Version 1.3.3 Update b

Proftpd ≫ Proftpd Version 1.3.3 Update rc1

Proftpd ≫ Proftpd Version 1.3.3 Update rc2

Proftpd ≫ Proftpd Version 1.3.3 Update rc3

Proftpd ≫ Proftpd Version 1.3.3 Update rc4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	91.3%	0.998

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050687.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050703.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050726.html

http://secunia.com/advisories/42052

Vendor Advisory

http://secunia.com/advisories/42217

http://www.mandriva.com/security/advisories?name=MDVSA-2010:227

http://www.proftpd.org/docs/NEWS-1.3.3c

http://www.securityfocus.com/bid/44562

Exploit

http://www.vupen.com/english/advisories/2010/2941

http://www.vupen.com/english/advisories/2010/2959

http://www.vupen.com/english/advisories/2010/2962

http://bugs.proftpd.org/show_bug.cgi?id=3521

Exploit

http://www.zerodayinitiative.com/advisories/ZDI-10-229/

https://nvd.nist.gov/vuln/detail/CVE-2010-4221

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-4221

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-4221

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-4221