Vulnerability in N/a
CVE-2008-4572
GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an…
EPSS: 0.769 (99.0th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 31729 (vdb-entry, x_refsource_BID)
- 32218 (x_refsource_SECUNIA, third-party-advisory)
- ADV-2008-2794 (vdb-entry, x_refsource_VUPEN)
- 6738 (exploit, x_refsource_EXPLOIT-DB)
- guildftpd-list-bo(45818) (vdb-entry, x_refsource_XF)
- 4422 (x_refsource_SREASON, third-party-advisory)
Frequently asked questions
- What is CVE-2008-4572?
- CVE-2008-4572 is a vulnerability in N/a. Published 2008-10-15.
- Is CVE-2008-4572 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.