CVEvulnerability
CVE-2011-3976
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-10-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) GETFILE in a ScriptFTP script.
Affected configurations
• ammsoft scriptftp 3.3
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/46099 Vendor Advisory
- http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/ Exploit, URL Repurposed
- http://www.exploit-db.com/exploits/17876 Exploit
- http://www.kb.cert.org/vuls/id/440219 US Government Resource
- http://www.securityfocus.com/bid/49707 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69962 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/46099 Vendor Advisory
- http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/ Exploit, URL Repurposed
- http://www.exploit-db.com/exploits/17876 Exploit
- http://www.kb.cert.org/vuls/id/440219 US Government Resource
- http://www.securityfocus.com/bid/49707 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69962 exchange.xforce.ibmcloud.com