vendor:
FreeBSD 8.0
by:
Maksymilian Arciemowicz and Adam Zabrocki
7,5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: FreeBSD 8.0
Affected Version From: 8.0
Affected Version To: 8.0
Patch Exists: YES
Related CWE: CVE-2010-1938
CPE: o:freebsd:freebsd
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2010
FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)
A buffer overflow vulnerability exists in the ftpd service of FreeBSD 8.0. An attacker can send an overly long username to the ftpd service, which can cause a stack-based buffer overflow and allow the attacker to execute arbitrary code on the vulnerable system.
Mitigation:
Upgrade to the latest version of FreeBSD 8.0 or later.
