CVE-2006-2027

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

26/04/2006

Last modified:

18/10/2018

Description

Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick &#39;n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when an admin selects the Logging section in the FTP server main window. NOTE: the original researcher claims that the vendor disputes this issue.

Impact

Vector 2.0

AV:N/AC:L/Au:S/C:P/I:P/A:P CVSS v2.0 Severity and Metrics:

Base Score: 6.50 MEDIUM
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): Single
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): Physical

Base Score 2.0

6.50

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:pablo_software_solutions:quick_n_easy_ftp_server:3.0::lite:::::
cpe:2.3:a:pablo_software_solutions:quick_n_easy_ftp_server:3.0::professional:::::

To consult the complete list of CPE names with products and versions, see this page

CVE-2006-2027

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools