CVE-2008-4572 | BDVDB-2026-32907 Detail

Description#

GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly triggering a heap-based buffer overflow.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/31729
http://secunia.com/advisories/32218
http://www.vupen.com/english/advisories/2008/2794
https://www.exploit-db.com/exploits/6738
https://exchange.xforce.ibmcloud.com/vulnerabilities/45818
http://securityreason.com/securityalert/4422

Exploit#

https://www.exploit-db.com/exploits/6738

History#

Version 12008-10-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.