CVE-2013-4742: Buffer Overflow
First published: Fri Aug 09 2013(Updated: )
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SurgeFTP | <=2.3b1 | |
| SurgeFTP | =2.0c | |
| SurgeFTP | =2.0d | |
| SurgeFTP | =2.0e | |
| SurgeFTP | =2.0f | |
| SurgeFTP | =2.2k1 | |
| SurgeFTP | =2.2k3 | |
| SurgeFTP | =2.2m1 | |
| SurgeFTP | =2.3a1 | |
| SurgeFTP | =2.3a2 | |
| SurgeFTP | =2.3a6 | |
| SurgeFTP | =2.3a7 | |
| SurgeFTP | =2.3a8 | |
| SurgeFTP | =2.3a9 | |
| SurgeFTP | =2.3a10 | |
| SurgeFTP | =2.3a12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-4742?
CVE-2013-4742 has a high severity rating due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2013-4742?
To fix CVE-2013-4742, you should upgrade NetWin SurgeFTP to version 23d2 or later.
Which versions of NetWin SurgeFTP are affected by CVE-2013-4742?
CVE-2013-4742 affects all NetWin SurgeFTP versions prior to 23d2, including 2.3b1 and earlier versions.
What type of attack does CVE-2013-4742 facilitate?
CVE-2013-4742 facilitates a buffer overflow attack that can lead to denial of service or remote code execution.
Is CVE-2013-4742 a critical vulnerability?
Yes, CVE-2013-4742 is considered critical as it allows remote attackers to exploit the flaw without requiring authentication.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/netwin
- canonical/surgeftp
- version/surgeftp/2.3b1
- version/surgeftp/2.0c
- version/surgeftp/2.0d
- version/surgeftp/2.0e
- version/surgeftp/2.0f
- version/surgeftp/2.2k1
- version/surgeftp/2.2k3
- version/surgeftp/2.2m1
- version/surgeftp/2.3a1
- version/surgeftp/2.3a2
- version/surgeftp/2.3a6
- version/surgeftp/2.3a7
- version/surgeftp/2.3a8
- version/surgeftp/2.3a9
- version/surgeftp/2.3a10
- version/surgeftp/2.3a12