CVE-2002-0768: Buffer Overflow
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0768?
CVE-2002-0768 is considered a critical vulnerability due to its potential to allow arbitrary code execution through a buffer overflow.
How do I fix CVE-2002-0768?
To fix CVE-2002-0768, upgrade to a version of lukemftp that is later than 1.5 which addresses this vulnerability.
Which versions of SUSE Linux are affected by CVE-2002-0768?
CVE-2002-0768 affects SUSE Linux versions 6.4 through 8.0.
What type of attack is associated with CVE-2002-0768?
CVE-2002-0768 is associated with remote code execution attacks via a malicious FTP server sending a long PASV command.
Are there any workarounds for CVE-2002-0768?
Disabling the use of the lukemftp FTP client or restricting network access to trusted servers can serve as temporary workarounds for CVE-2002-0768.