CVE

Id
24842  
CVE No.
CVE-2007-1485  
Status
Candidate  
Description
** DISPUTED ** Buffer overflow in the set_umask function in QFTP in LIBFtp 3.1-1 allows local users to execute arbitrary code via a long -m argument. NOTE: CVE disputes this issue because QFTP is not setuid, and it is unlikely that there are web interfaces to QFTP that would accept untrusted command line arguments.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246126 24842 CVE-2007-1485 BUGTRAQ:20070315 QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow  View
246127 24842 CVE-2007-1485 URL:http://www.securityfocus.com/archive/1/archive/1/462952/100/0/threaded  View
246128 24842 CVE-2007-1485 BID:22986  View
246129 24842 CVE-2007-1485 URL:http://www.securityfocus.com/bid/22986  View
246130 24842 CVE-2007-1485 OSVDB:35089  View
246131 24842 CVE-2007-1485 URL:http://osvdb.org/35089  View
246132 24842 CVE-2007-1485 SREASON:2443  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53015 JVNDB-2007-001707 Sascha Schroeder WebLog の index.php におけるディレクトリトラバーサルの脆弱性 Sascha Schroeder WebLog の index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-1487 24842 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001707.html  View