Description
Multiple stack-based buffer overflows in High Performance Anonymous FTP Server (hpaftpd) 1.01 allow remote attackers to execute arbitrary code via long arguments to the (1) USER, (2) PASS, (3) CWD, (4) MKD, (5) RMD, (6) DELE, (7) RNFR, or (8) RNTO FTP command.
References
- ADV-2007-1142 vdb-entry
- http://www.securiteam.com/securitynews/5AP0L1PKUU.html
- 23147 vdb-entry
- 35182 vdb-entry
- hpaftpd-multiple-commands-bo(33288) vdb-entry