CVE-2012-5002: Buffer Overflow
Published Sep 19, 2012
·Updated
Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.
Affected Software
2 affected components
Ricoh DL-10=4.5.0.1
Ricoh SR10 FTP server=1.1.0.6
Event History
Sep 19, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5002?
CVE-2012-5002 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2012-5002?
To fix CVE-2012-5002, disable the Log file name option in the SR10 FTP server or upgrade to a patched version.
3
What systems are affected by CVE-2012-5002?
CVE-2012-5002 affects Ricoh DC Software DL-10 version 4.5.0.1 and Ricoh SR10 FTP server version 1.1.0.6.
4
Can CVE-2012-5002 be exploited remotely?
Yes, CVE-2012-5002 can be exploited remotely by attackers sending a long USER FTP command.
5
What type of vulnerability is CVE-2012-5002?
CVE-2012-5002 is a stack-based buffer overflow vulnerability.