CVE-2001-0936: Buffer Overflow
Published Nov 30, 2001
·Updated
Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.
Affected Software
7 affected components
frox frox=0.6.6
frox frox=0.6.4
frox frox=0.6.3
frox frox=0.6.2
frox frox=0.6.1
frox frox=0.6.5
frox frox=0.6.0
Remediation
Patch Available
Event History
Nov 30, 2001
CVE Published
05:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0936?
CVE-2001-0936 is considered a critical vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2001-0936?
To fix CVE-2001-0936, upgrade to Frox version 0.6.7 or later, which addresses the buffer overflow issue.
3
What software versions are affected by CVE-2001-0936?
Frox versions 0.6.0 to 0.6.6 are affected by CVE-2001-0936.
4
Can CVE-2001-0936 be exploited remotely?
Yes, CVE-2001-0936 can be exploited remotely by sending crafted MDTM requests to the vulnerable Frox server.
5
What impact does CVE-2001-0936 have on system security?
CVE-2001-0936 can lead to unauthorized access and control over affected systems, compromising their security.