CVE-2013-4742

Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
netwinsurgeftp
𝑥
≤ 2.3b1
netwinsurgeftp
2.0c:c
netwinsurgeftp
2.0d:d
netwinsurgeftp
2.0e:e
netwinsurgeftp
2.0f:f
netwinsurgeftp
2.2k1:k1
netwinsurgeftp
2.2k3:k3
netwinsurgeftp
2.2m1:m1
netwinsurgeftp
2.3a1:a1
netwinsurgeftp
2.3a2:a2
netwinsurgeftp
2.3a6:a6
netwinsurgeftp
2.3a7:a7
netwinsurgeftp
2.3a8:a8
netwinsurgeftp
2.3a9:a9
netwinsurgeftp
2.3a10:a10
netwinsurgeftp
2.3a12:a12
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2013-07/0149.html
http://osvdb.org/95582
http://secunia.com/advisories/54188
http://www.securityfocus.com/bid/61403
https://exchange.xforce.ibmcloud.com/vulnerabilities/85922
http://archives.neohapsis.com/archives/bugtraq/2013-07/0149.html
http://osvdb.org/95582
http://secunia.com/advisories/54188
http://www.securityfocus.com/bid/61403
https://exchange.xforce.ibmcloud.com/vulnerabilities/85922