cbcvebase.
CVE-2017-18047
published 2018-01-22

CVE-2017-18047: Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply.

PriorityP265critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
20.08%
97.1th percentile
Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply.

Affected

1 ranges
VendorProductVersion rangeFixed in
labfnfsaxe——

Detection & IOCsextracted from sources · hover to see the quote

versionnfsAxe 3.7↗
  • →Detect exploitation attempts targeting LabF nfsAxe 3.7 FTP client via an abnormally long FTP server reply, which triggers a stack buffer overflow enabling remote code execution. ↗
  • →A Metasploit module exists for this vulnerability under the path modules/exploits/windows/ftp/labf_nfsaxe.rb — monitor for exploitation attempts originating from rogue/malicious FTP servers responding with oversized reply strings. ↗
  • ·Exploitation requires the victim nfsAxe 3.7 FTP client to connect to an attacker-controlled FTP server; the overflow is triggered by a long reply from the server side, not the client side. ↗

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.