Vulnerability Details CVE-2001-1113
Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 79.8%
CVSS Severity
CVSS v2 Score 10.0
References
- ftp://ftp.trolltech.com/freebies/ftpd/troll-ftpd-1.27.tar.gz
- http://www.securityfocus.com/archive/1/203874
- http://www.securityfocus.com/bid/3174
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6974
- ftp://ftp.trolltech.com/freebies/ftpd/troll-ftpd-1.27.tar.gz
- http://www.securityfocus.com/archive/1/203874
- http://www.securityfocus.com/bid/3174
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6974
Products affected by CVE-2001-1113
-
cpe:2.3:a:trolltech:trollftpd:1.17
-
cpe:2.3:a:trolltech:trollftpd:1.18
-
cpe:2.3:a:trolltech:trollftpd:1.19
-
cpe:2.3:a:trolltech:trollftpd:1.20
-
cpe:2.3:a:trolltech:trollftpd:1.21
-
cpe:2.3:a:trolltech:trollftpd:1.22
-
cpe:2.3:a:trolltech:trollftpd:1.23
-
cpe:2.3:a:trolltech:trollftpd:1.24
-
cpe:2.3:a:trolltech:trollftpd:1.25
-
cpe:2.3:a:trolltech:trollftpd:1.26