XM Ease Personal FTP Server format string vulnerability
Published:		23.12.2006
Source:		MILW0RM
SecurityVulns ID:		6966
Type:		remote
Level:		5/10
Description:		Format string vulnerability in FTP command.

Affected:		XMEASY : XM Easy Personal FTP Server 5.2
CVE:		CVE-2007-1195 (Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728.)
		CVE-2006-5728 (XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags.)

Files:		XM Easy Personal FTP Server 5.2.1 format string Denial of Service
Discuss:		Read or add your comments to this news (0 comments)