CVE-2005-4816: Buffer Overflow

Published Dec 31, 2005

Updated

Buffer overflow in modradius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.

Affected Software

37 affected components

Proftpd Project Proftpd=1.2

Proftpd Project Proftpd=1.2.0_rc1

Proftpd Project Proftpd=1.2.0_rc2

Proftpd Project Proftpd=1.2.0_rc3

Proftpd Project Proftpd=1.2.1

Proftpd Project Proftpd=1.2.2

Proftpd Project Proftpd=1.2.2_rc1

Proftpd Project Proftpd=1.2.2_rc3

Proftpd Project Proftpd=1.2.3

Proftpd Project Proftpd=1.2.4

Proftpd Project Proftpd=1.2.5

Proftpd Project Proftpd=1.2.5_rc1

Proftpd Project Proftpd=1.2.6

Proftpd Project Proftpd=1.2.7

Proftpd Project Proftpd=1.2.7_rc1

Proftpd Project Proftpd=1.2.7_rc2

Proftpd Project Proftpd=1.2.7_rc3

Proftpd Project Proftpd=1.2.8

Proftpd Project Proftpd=1.2.8_rc1

Proftpd Project Proftpd=1.2.8_rc2

Proftpd Project Proftpd=1.2.9

Proftpd Project Proftpd=1.2.9_rc1

Proftpd Project Proftpd=1.2.9_rc2

Proftpd Project Proftpd=1.2.9_rc3

Proftpd Project Proftpd=1.2.10

Proftpd Project Proftpd=1.2_pre1

Proftpd Project Proftpd=1.2_pre2

Proftpd Project Proftpd=1.2_pre3

Proftpd Project Proftpd=1.2_pre4

Proftpd Project Proftpd=1.2_pre5

Proftpd Project Proftpd=1.2_pre6

Proftpd Project Proftpd=1.2_pre7

Proftpd Project Proftpd=1.2_pre8

Proftpd Project Proftpd=1.2_pre9

Proftpd Project Proftpd=1.2_pre10

Proftpd Project Proftpd=1.2_pre11

Proftpd Project Proftpd=1.3.0_rc1

Remediation

Patch Available

http://www.securityfocus.com/bid/16535

Event History

Dec 31, 2005

CVE Published

05:00 AM

Dec 23, 2006

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4816?

CVE-2005-4816 has been classified as having a high severity because it allows remote attackers to cause a denial of service and potentially execute arbitrary code.

How do I fix CVE-2005-4816?

To fix CVE-2005-4816, upgrade to ProFTPD version 1.3.0rc2 or later, which addresses the buffer overflow vulnerability.

What versions of ProFTPD are affected by CVE-2005-4816?

CVE-2005-4816 affects several versions of ProFTPD including all versions prior to 1.3.0rc2.

What kind of attacks can exploit CVE-2005-4816?

CVE-2005-4816 can be exploited by attackers sending long passwords, leading to a buffer overflow condition that may crash the service or execute arbitrary code.

Is CVE-2005-4816 a remote code execution vulnerability?

Yes, CVE-2005-4816 is considered a remote code execution vulnerability since it can allow attackers to execute arbitrary code under certain conditions.