Description
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
References
- 20010409 Globbing Vulnerabilities in Multiple FTP Daemons vendor-advisory
- CA-2001-07 third-party-advisory
- 2550 vdb-entry
- ftp-glob-expansion(6332) vdb-entry