CVE-2001-0965
Published Aug 31, 2001
Last updated 16 years ago
Overview
- Description
- glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.13.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F318FEBE-E9EE-4DD2-881C-61E5FE05AAF8"
},
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.16.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AADA6033-2154-455E-8E10-761E777549E5"
},
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.17.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06212998-AE09-4DA2-9F9C-EBB60BBD7EBB"
},
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.18a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "834771A5-87B0-41E5-A93C-6A1343726E49"
},
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EC24C84-A059-4F09-AE7D-1F077AE8F291"
},
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B8C2E9C-2305-4DAD-8406-D5BFAFBBEEC3"
},
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93D1CB71-B47D-4683-8174-328676D31DC1"
},
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.22b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "431B7EC0-0471-4F31-A26C-F59B541DCD09"
},
{
"criteria": "cpe:2.3:a:glftpd:glftpd:1.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE1E9A9B-BD3E-4D6B-87F5-1A84ACE32115"
}
],
"operator": "OR"
}
]
}
]