CVE

Id
40458  
CVE No.
CVE-2009-3023  
Status
Candidate  
Description
Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."  
Phase
Assigned (20090831)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
444460 40458 CVE-2009-3023 MILW0RM:9541  View
444461 40458 CVE-2009-3023 URL:http://www.milw0rm.com/exploits/9541  View
444462 40458 CVE-2009-3023 MILW0RM:9559  View
444463 40458 CVE-2009-3023 URL:http://www.milw0rm.com/exploits/9559  View
444464 40458 CVE-2009-3023 MS:MS09-053  View
444465 40458 CVE-2009-3023 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-053.mspx  View
444466 40458 CVE-2009-3023 MSKB:975191  View
444467 40458 CVE-2009-3023 URL:http://support.microsoft.com/default.aspx?scid=kb;[LN];Q975191  View
444468 40458 CVE-2009-3023 CERT:TA09-286A  View
444469 40458 CVE-2009-3023 URL:http://www.us-cert.gov/cas/techalerts/TA09-286A.html  View
444470 40458 CVE-2009-3023 CERT-VN:VU#276653  View
444471 40458 CVE-2009-3023 URL:http://www.kb.cert.org/vuls/id/276653  View
444472 40458 CVE-2009-3023 BID:36189  View
444473 40458 CVE-2009-3023 URL:http://www.securityfocus.com/bid/36189  View
444474 40458 CVE-2009-3023 OVAL:oval:org.mitre.oval:def:6080  View
444475 40458 CVE-2009-3023 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6080  View
444476 40458 CVE-2009-3023 VUPEN:ADV-2009-2481  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41460 JVNDB-2009-002467 複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性 複数の Symantec 製品の VRTSweb には、認証リクエストを適切に検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-3027 40458 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002467.html  View