Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2005-2850

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SlimFTPd是一个小型的FTP服务器工具，完全支持多线程技术，具有绝大部分常用的功能，而体积非常小巧。 SlimFTPd 3.17版允许远程攻击者通过以下命令触发服务拒绝(崩溃)：(1)USER 命令；(2)PASS 命令，可能由缓存溢出或差一错误引起。

AI Predicted 5.3 Difficulty: Moderate EPSS 7.21% · P94

Public Exploits 1

ExploitDB · 1 EDB-26219 [dos]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-2850

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, possibly due to a buffer overflow or off-by-one error.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SlimFTPd拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SlimFTPd是一个小型的FTP服务器工具，完全支持多线程技术，具有绝大部分常用的功能，而体积非常小巧。 SlimFTPd 3.17版允许远程攻击者通过以下命令触发服务拒绝(崩溃)：(1)USER 命令；(2)PASS 命令，可能由缓存溢出或差一错误引起。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2005-2850

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-2850

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-2850 (1)

Other References for CVE-2005-2850 (2)

Same Patch Batch · n/a · 2005-09-08 · 31 CVEs total

CVE-2005-2856 Microchip Data Systems ZipTV TZipTV ARJ文件处理溢出漏洞
CVE-2005-2870 Solaris net-svc执行任意代码漏洞
CVE-2005-2869 PHPMyAdmin Cookie.Auth.Lib.PHP HTML 注入漏洞
CVE-2005-2868 ZipTorrent pref.txt信息泄露漏洞
CVE-2005-2867 BlueWhaleCRM Account ID SQL注入漏洞
CVE-2005-2866 Mercora IMRadio注册表键权限提升漏洞
CVE-2005-2865 aMember Pro多个远程文件包含漏洞
CVE-2005-2864 URBAN不安全文件创建漏洞
CVE-2005-2863 OpenWebMail OpenWebmail-main.PL 跨站脚本漏洞
CVE-2005-2862 Annex调制解调器空密码漏洞
CVE-2005-2861 N-Stealth跨站脚本漏洞
CVE-2005-2860 Nikto跨站脚本漏洞
CVE-2005-2859 Savant注册键本地用户权限提升漏洞
CVE-2005-2858 Rediff Bol FullAddressBook可读取Windows地址薄漏洞
CVE-2005-2857 SMTP Server成为开放的邮件中继服务器漏洞
CVE-2005-2020 3Com Network Supervisor远程目录遍历漏洞
CVE-2005-2855 Unclassified NewsBoard 跨站脚本漏洞
CVE-2005-2854 thesitewizard.com网站chfeedback.pl 反馈表 Perl 脚本CRLF注入漏洞
CVE-2005-2853 GuppY多个跨站脚本漏洞
CVE-2005-2852 Novell Netware CIFS.NLM未知的拒绝服务漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-2850

No comments yet

Leave a comment