CVE-2003-0831: Buffer Overflow
Published Sep 25, 2003
·Updated
ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a buffer overflow using certain files.
Affected Software
9 affected components
Proftpd Project Proftpd=1.2.7_rc3
Proftpd Project Proftpd=1.2.7_rc2
Proftpd Project Proftpd=1.2.9_rc2
Proftpd Project Proftpd=1.2.7
Proftpd Project Proftpd=1.2.8_rc1
Proftpd Project Proftpd=1.2.9_rc1
Proftpd Project Proftpd=1.2.7_rc1
Proftpd Project Proftpd=1.2.8
Proftpd Project Proftpd=1.2.8_rc2
Event History
Sep 25, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Nov 17, 2003
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0831?
CVE-2003-0831 is considered to be a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2003-0831?
To fix CVE-2003-0831, upgrade ProFTPD to version 1.2.10 or later.
3
Which versions of ProFTPD are affected by CVE-2003-0831?
Versions of ProFTPD from 1.2.7 through 1.2.9rc2 are affected by CVE-2003-0831.
4
Can CVE-2003-0831 lead to unauthorized access?
Yes, CVE-2003-0831 can potentially lead to unauthorized access through remote code execution.
5
What type of attacks is CVE-2003-0831 associated with?
CVE-2003-0831 is associated with buffer overflow attacks that exploit newline character translation issues.