CVE-2011-5012: Buffer Overflow
First published: Sun Dec 25 2011(Updated: )
Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186, and Reflection 14.1 SP1 before 14.1.1.206, allows remote FTP servers to execute arbitrary code via a long directory name in a response to a LIST command.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Attachmate Reflection for IBM | ||
| Attachmate Reflection | ||
| Attachmate Reflection | ||
| Attachmate Reflection | =14.1-sp1 | |
| Attachmate Reflection | =7.2-sp1 | |
| Attachmate Reflection | =sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/46879
- http://www.exploit-db.com/exploits/18119
- http://support.attachmate.com/techdocs/1708.html
- http://www.osvdb.org/77189
- http://support.attachmate.com/techdocs/2288.html
- http://www.securitytracker.com/id?1026340
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=29&Itemid=29
- http://support.attachmate.com/techdocs/2502.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71330
Frequently Asked Questions
What is the severity of CVE-2011-5012?
CVE-2011-5012 has a high severity rating due to the potential for remote code execution via a heap-based buffer overflow.
How do I fix CVE-2011-5012?
To fix CVE-2011-5012, update the Attachmate Reflection software to the latest version that includes the necessary patches.
Which software versions are affected by CVE-2011-5012?
CVE-2011-5012 affects various versions of the Attachmate Reflection software including 7.2 SP1 and multiple releases of Reflection 2008 and 2011.
What type of vulnerability is CVE-2011-5012?
CVE-2011-5012 is classified as a heap-based buffer overflow vulnerability.
Can CVE-2011-5012 be exploited remotely?
Yes, CVE-2011-5012 can be exploited remotely, allowing attackers to execute arbitrary code on the affected system.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/attachmate
- canonical/attachmate reflection for ibm
- canonical/attachmate reflection
- version/attachmate reflection/14.1-sp1
- version/attachmate reflection/7.2-sp1
- version/attachmate reflection/sp1