First published: Fri Nov 30 2001(Updated: )
Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Foreman | =0.6.0 | |
Foreman | =0.6.1 | |
Foreman | =0.6.2 | |
Foreman | =0.6.3 | |
Foreman | =0.6.4 | |
Foreman | =0.6.5 | |
Foreman | =0.6.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0936 is considered a critical vulnerability due to its potential to allow arbitrary code execution.
To fix CVE-2001-0936, upgrade to Frox version 0.6.7 or later, which addresses the buffer overflow issue.
Frox versions 0.6.0 to 0.6.6 are affected by CVE-2001-0936.
Yes, CVE-2001-0936 can be exploited remotely by sending crafted MDTM requests to the vulnerable Frox server.
CVE-2001-0936 can lead to unauthorized access and control over affected systems, compromising their security.