NVD

Id
15504  
Name
CVE-2010-4221  
Description
Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-11-09  
Modified Date
2011-09-14  
Seq
2010-4221  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87616 15504 CVE-2010-4221 http://bugs.proftpd.org/show_bug.cgi?id=3521  View
87617 15504 CVE-2010-4221 FEDORA-2010-17091  View
87618 15504 CVE-2010-4221 FEDORA-2010-17098  View
87619 15504 CVE-2010-4221 FEDORA-2010-17220  View
87620 15504 CVE-2010-4221 MDVSA-2010:227  View
87621 15504 CVE-2010-4221 http://www.proftpd.org/docs/NEWS-1.3.3c  View
87622 15504 CVE-2010-4221 44562  View
87623 15504 CVE-2010-4221 ADV-2010-2941  View
87624 15504 CVE-2010-4221 ADV-2010-2959  View
87625 15504 CVE-2010-4221 ADV-2010-2962  View
87626 15504 CVE-2010-4221 http://www.zerodayinitiative.com/advisories/ZDI-10-229/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36679 JVNDB-2010-002459 ProFTPD の pr_netio_telnet_get 関数におけるスタックベースのバッファオーバーフローの脆弱性 ProFTPD の netio.c 内にある pr_netio_telnet_get 関数には、FTP または FTPS server 上での TELNET_IAC エスケープシーケンスの処理に関して不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-4221 46801 CVE-2010-4221 15504 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002459.html 2010-10-29 2010-12-22 View