CVE-2009-2832: Buffer Overflow
Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a CWD command specifying a pathname in a deeply nested hierarchy of directories, related to a "CWD command line tool."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2832?
The severity of CVE-2009-2832 is critical due to the potential for remote code execution and denial of service.
How do I fix CVE-2009-2832?
To fix CVE-2009-2832, update your Apple Mac OS X Server to version 10.6.2 or later.
Which versions of Apple Mac OS X Server are affected by CVE-2009-2832?
CVE-2009-2832 affects multiple versions of Apple Mac OS X Server up to 10.6.1.
What type of attack does CVE-2009-2832 describe?
CVE-2009-2832 describes a buffer overflow vulnerability that can be exploited via a malicious CWD command.
What are the consequences of exploiting CVE-2009-2832?
Exploiting CVE-2009-2832 can lead to arbitrary code execution or crash the FTP server, causing denial of service.