Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ProFTPD _xlate_ascii_write()远程缓冲区溢出漏洞
Vulnerability Description
ProFTPD是一款高可配置性的FTP服务程序。 ProFTPD包含的_xlate_ascii_write()函数缺少正确的边界检查，远程攻击者可以利用这个漏洞进行缓冲区溢出，可以FTP进程权限在系统上执行任意指令。 _xlate_ascii_write()函数在对session.xfer.buf的缓冲区检查缺少精确的检查，攻击者可以覆盖此缓冲区临近的两个内存字节，因此可能控制指令，以FTP进程权限远程执行任意代码。攻击者可以发布RETR命令来触发此漏洞。
CVSS Information
N/A
Vulnerability Type
N/A