CVE-2008-0702

Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.

Link	Resource
http://www.securityfocus.com/bid/27568
http://secunia.com/advisories/28760	Vendor Advisory
http://securityreason.com/securityalert/3639
http://www.vupen.com/english/advisories/2008/0393
https://www.exploit-db.com/exploits/5036
http://www.securityfocus.com/archive/1/487431/100/0/threaded

Configuration 1

cpe:2.3:a:south_river_technologies:titan_ftp_server:6.0.5.549:*:*:*:*:*:*:* cpe:2.3:a:south_river_technologies:titan_ftp_server:6.03:*:*:*:*:*:*:*

---

Published : 2008-02-12 01:00

Updated : 2018-10-15 10:02

---

NVD link : CVE-2008-0702

Mitre link : CVE-2008-0702

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer