NVD

Id
83362  
Name
CVE-2017-6465  
Description
Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-03-18  
Published
2017-03-09  
Modified Date
2017-03-14  
Seq
2017-6465  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
409939 83362 CVE-2016-7662 94905  View
409940 83362 CVE-2016-7662 https://support.apple.com/HT207422  View
409941 83362 CVE-2016-7662 https://support.apple.com/HT207423  View
409942 83362 CVE-2016-7662 https://support.apple.com/HT207487  View
409943 83362 CVE-2016-7662 94905  View
409944 83362 CVE-2016-7662 https://support.apple.com/HT207422  View
409945 83362 CVE-2016-7662 https://support.apple.com/HT207423  View
409946 83362 CVE-2016-7662 https://support.apple.com/HT207487  View
411414 83362 CVE-2017-3002 96861  View
411415 83362 CVE-2017-3002 https://helpx.adobe.com/security/products/flash-player/apsb17-07.html  View
411416 83362 CVE-2017-3002 96861  View
411417 83362 CVE-2017-3002 https://helpx.adobe.com/security/products/flash-player/apsb17-07.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65885 JVNDB-2017-002224 FTPShell Client におけるバッファオーバーフローの脆弱性 FTPShell Client は、接続している FTP サーバに PWD コマンドをデフォルトで送信するがレスポンスの長さをチェックしないため、バッファオーバーフローの脆弱性が存在します。 CVE-2017-6465 CVE-2017-6465 83362 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002224.html 2017-03-04 2017-04-04 View