Vulnerability in Prozilla Download Accelerator
CVE-2005-2961
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.
EPSS: 0.086 (94.5th percentile) — read the EPSS interpretation.
Affected products
- Prozilla Prozilla_download_accelerator — versions 1.3.7.4
- N/a — versions n/a
References
- security@debian.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_XF)