CVE-2010-4221: Buffer Overflow
Published Nov 9, 2010
·Updated
Multiple stack-based buffer overflows in the prnetiotelnetgets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.
Affected Software
15 affected components
ProFTPD ProFTPD=1.3.3-b
ProFTPD ProFTPD=1.3.3-rc4
ProFTPD ProFTPD=1.3.2-d
ProFTPD ProFTPD=1.3.2-a
ProFTPD ProFTPD=1.3.3-rc2
ProFTPD ProFTPD=1.3.2-c
ProFTPD ProFTPD=1.3.2-e
ProFTPD ProFTPD=1.3.2
ProFTPD ProFTPD=1.3.3-rc3
ProFTPD ProFTPD=1.3.3-a
ProFTPD ProFTPD=1.3.2-rc3
ProFTPD ProFTPD=1.3.2-b
ProFTPD ProFTPD=1.3.2-rc4
ProFTPD ProFTPD=1.3.3
ProFTPD ProFTPD=1.3.3-rc1
Event History
Nov 9, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4221?
CVE-2010-4221 has a CVSS base score of 7.5, indicating it is a high-severity vulnerability.
2
How do I fix CVE-2010-4221?
To fix CVE-2010-4221, upgrade ProFTPD to version 1.3.3c or later.
3
What types of attacks can CVE-2010-4221 allow?
CVE-2010-4221 can allow remote attackers to execute arbitrary code on vulnerable servers.
4
Which versions of ProFTPD are affected by CVE-2010-4221?
CVE-2010-4221 affects ProFTPD versions prior to 1.3.3c, including multiple 1.3.2 and 1.3.3 release versions.
5
Is CVE-2010-4221 a local or remote vulnerability?
CVE-2010-4221 is a remote vulnerability, allowing attacks from unauthenticated attackers over the network.