Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.11185
Kategorie:FTP
Titel:vxworks ftpd buffer overflow
Zusammenfassung:It might be possible to make the remote FTP server; crash by issuing this command :;; CEL aaaa(...)aaaa;; This problem is similar to the 'aix ftpd' overflow; but on embedded vxworks based systems like the 3com; nbx IP phone call manager and seems to cause the server; to crash.
Beschreibung:Summary:
It might be possible to make the remote FTP server
crash by issuing this command :

CEL aaaa(...)aaaa

This problem is similar to the 'aix ftpd' overflow
but on embedded vxworks based systems like the 3com
nbx IP phone call manager and seems to cause the server
to crash.

Affected Software/OS:
This affects VxWorks ftpd versions 5.4 and 5.4.2.

Solution:
If you are using an embedded vxworks
product, please contact the OEM vendor and reference WindRiver field patch
TSR 296292. If this is the 3com NBX IP Phone call manager, contact 3com.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2002-2300
BugTraq ID: 6297
http://www.securityfocus.com/bid/6297
Bugtraq: 20021202 [VU#317417] Denial of Service condition in vxworks ftpd/3com nbx (Google Search)
http://marc.info/?l=bugtraq&m=103886644126011&w=2
Bugtraq: 20030427 3com NBX IP Phone Call manager Denial of Service - Update (Google Search)
http://seclists.org/lists/bugtraq/2003/Apr/0344.html
CERT/CC vulnerability note: VU#317417
http://www.kb.cert.org/vuls/id/317417
http://www.secnap.com/alerts.php?pg=6
http://securitytracker.com/id?1005732
http://securitytracker.com/id?1006760
XForce ISS Database: 3com-nbx-cel-bo(10739)
https://exchange.xforce.ibmcloud.com/vulnerabilities/10739
CopyrightCopyright (C) 2002 Michael Scheidell

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.