CVEvulnerability

CVE-2011-5012

10.0 HIGH Published 2011-12-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-12-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186, and Reflection 14.1 SP1 before 14.1.1.206, allows remote FTP servers to execute arbitrary code via a long directory name in a response to a LIST command.

Affected configurations

• attachmate reflection 7.2 • attachmate reflection 14.1 • attachmate reflection 2008 • attachmate reflection 2008r1 sp1 • attachmate reflection 2008r2 • attachmate reflection 2011r1

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References