Vulnerability Details CVE-2008-0702
Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.161
EPSS Ranking 94.5%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/28760
- http://securityreason.com/securityalert/3639
- http://www.securityfocus.com/archive/1/487431/100/0/threaded
- http://www.securityfocus.com/bid/27568
- http://www.vupen.com/english/advisories/2008/0393
- https://www.exploit-db.com/exploits/5036
- http://secunia.com/advisories/28760
- http://securityreason.com/securityalert/3639
- http://www.securityfocus.com/archive/1/487431/100/0/threaded
- http://www.securityfocus.com/bid/27568
- http://www.vupen.com/english/advisories/2008/0393
- https://www.exploit-db.com/exploits/5036
Products affected by CVE-2008-0702
-
cpe:2.3:a:south_river_technologies:titan_ftp_server:6.0.5.549
-
cpe:2.3:a:south_river_technologies:titan_ftp_server:6.03