20030223 moxftp arbitrary code execution poc/advisorymailing list
http://marc.info/?l=bugtraq&m=104610380126860&w=2 CVE-2003-0203
moxftp 2.2 - Banner Parsing Buffer Overflow
Record summary
CVE-2003-0203 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBmoxftp 2.2 - Banner Parsing Buffer OverflowExploitDB exploitby Knud Erik HojgaardNot analyzed1 file
References
88136Third-party advisory
http://secunia.com/advisories/8136 DSA-281Vendor advisory
http://www.debian.org/security/2003/dsa-281 20030223 moxftp arbitrary code execution poc/advisorymailing list
http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-02/0338.html 6921vdb entry
http://www.securityfocus.com/bid/6921 1006156vdb entry
http://www.securitytracker.com/id?1006156 moxftp-welcome-banner-bo(11399)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/11399 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-0203