CVE

Id
3068  
CVE No.
CVE-2001-0247  
Status
Candidate  
Description
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.  
Phase
Modified (20010910-01)  
Votes
ACCEPT(5) Baker, Cole, Oliver, Renaud, Ziese | MODIFY(1) Frech | NOOP(2) Christey, Wall  
Comments
Frech> XF:ftp-glob-expansion(6332) | Christey> ADDREF SGI:20010802-01-P | Christey> COMPAQ:SSRT-547 | URL:http://archives.neohapsis.com/archives/tru64/2002-q3/0017.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
12759 3068 CVE-2001-0247 NAI:20010409 Globbing Vulnerabilities in Multiple FTP Daemons  View
12760 3068 CVE-2001-0247 URL:http://www.nai.com/research/covert/advisories/048.asp  View
12761 3068 CVE-2001-0247 CERT:CA-2001-07  View
12762 3068 CVE-2001-0247 URL:http://www.cert.org/advisories/CA-2001-07.html  View
12763 3068 CVE-2001-0247 NETBSD:NetBSD-SA2000-018  View
12764 3068 CVE-2001-0247 URL:ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc  View
12765 3068 CVE-2001-0247 FREEBSD:FreeBSD-SA-01:33  View
12766 3068 CVE-2001-0247 URL:http://archives.neohapsis.com/archives/freebsd/2001-04/0466.html  View
12767 3068 CVE-2001-0247 SGI:20010802-01-P  View
12768 3068 CVE-2001-0247 URL:ftp://patches.sgi.com/support/free/security/advisories/20010802-01-P  View
12769 3068 CVE-2001-0247 BID:2548  View
12770 3068 CVE-2001-0247 URL:http://www.securityfocus.com/bid/2548  View
12771 3068 CVE-2001-0247 XF:ftp-glob-expansion(6332)  View

Related JVN