CVE-2001-0702: High severity Grant Averett Ceberus Ftp Server vulnerability

Published Aug 29, 2001

Updated

Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, or (3) PASV command.

Affected Software

7 affected components

Grant Averett Ceberus Ftp Server=1.1

Grant Averett Ceberus Ftp Server=1.0

Grant Averett Ceberus Ftp Server=1.22

Grant Averett Ceberus Ftp Server=1.5

Grant Averett Ceberus Ftp Server=1.2

Grant Averett Ceberus Ftp Server=1.01

Grant Averett Ceberus Ftp Server=1.3

Event History

Aug 29, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0702?

CVE-2001-0702 has a high severity as it can lead to a denial of service and potentially allow the execution of arbitrary code.

How do I fix CVE-2001-0702?

To fix CVE-2001-0702, upgrade to a version of Cerberus FTP Server later than 1.5 that addresses this vulnerability.

Which versions of Cerberus FTP Server are affected by CVE-2001-0702?

CVE-2001-0702 affects all versions of Cerberus FTP Server prior to 1.6.

What types of attacks are possible due to CVE-2001-0702?

CVE-2001-0702 can be exploited by attackers to cause a denial of service or execute arbitrary code using long usernames, passwords, or PASV commands.

Is CVE-2001-0702 remotely exploitable?

Yes, CVE-2001-0702 can be exploited remotely, allowing attackers to take advantage of the vulnerability without physical access to the server.