Vulnerability in Plug And Play Software Web Server

CVE-2003-1158

Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a denial of service (crash) via long (1) dir, (2) ls, (3) delete, (4) mkdir, (5) DELE, (6) RMD, or (7) MKD commands.

EPSS: 0.033 (87.4th percentile) — read the EPSS interpretation.

Affected products

Plug_and_play_software Plug_and_play_web_server — versions 1.0.002c
N/a — versions n/a

References

cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)