Description
Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) via a long FTP command such as (1) CWD, (2) STAT, or (3) LIST.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Titan FTP Server - Long Command Heap Overflow EDB-426 · remote · Aug 31, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Titan FTP ≤ 3.21 - Heap Overflow via Long Commands network/cves/2004/CVE-2004-1641.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- titan-long-command-bo(17172) vdb-entry
- 11069 vdb-entry
- 20040829 [vulnwatch] Titan FTP Server Long Command Heap Overflow Vulnerability mailing-list
- 12419 third-party-advisory