First published: Mon Aug 13 2001(Updated: )
Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Trolltech Trollftpd | =1.24 | |
Trolltech Trollftpd | =1.22 | |
Trolltech Trollftpd | =1.19 | |
Trolltech Trollftpd | =1.21 | |
Trolltech Trollftpd | =1.23 | |
Trolltech Trollftpd | =1.25 | |
Trolltech Trollftpd | =1.18 | |
Trolltech Trollftpd | =1.20 | |
Trolltech Trollftpd | =1.17 | |
Trolltech Trollftpd | =1.26 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-1113 has a high severity as it allows local users to execute arbitrary code through a buffer overflow.
To mitigate CVE-2001-1113, update to a version of TrollFTPD later than 1.26 which addresses this vulnerability.
TrollFTPD versions 1.26 and earlier are affected by CVE-2001-1113.
CVE-2001-1113 is a buffer overflow vulnerability triggered by creating deeply nested directories with long names.
Local users with access to the system can exploit CVE-2001-1113 to execute arbitrary code.