CVE-2005-3524

published 2005-11-07

CVE-2005-3524: Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory…

Priority P3 54 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

EXPLOIT

Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	linux-ftpd-ssl	< linux-ftpd-ssl 0.17.18+0.3-5 (bookworm)	linux-ftpd-ssl 0.17.18+0.3-5 (bookworm)
linux-ftpd-ssl	linux-ftpd-ssl	—	—
linux-ftpd-ssl	linux-ftpd-ssl	>= 0 < 0.17.18+0.3-5	0.17.18+0.3-5
linux-ftpd-ssl	linux-ftpd-ssl	>= 0 < 0.17.18+0.3-5	0.17.18+0.3-5
linux-ftpd-ssl	linux-ftpd-ssl	>= 0 < 0.17.18+0.3-5	0.17.18+0.3-5

CVSS provenance

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

osv 10.0 CRITICAL

vendor_debian 10.0 HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.