Detections
Analytics

QNX RTP FTP stat Command strtok() Function Overflow

high Nessus Plugin ID 10692

Synopsis

The remote FTP server is affected by a stack overflow vulnerability.

Description

The remote FTP server is vulnerable to a stack overflow when calling the 'strtok()' function. An attacker can exploit this flaw to execute arbitrary code on the remote host.

Solution

There is no known solution at this time.

See Also

http://www.nessus.org/u?20b5c285

Plugin Details

Severity: High

ID: 10692

File Name: ftp_qnx_stack_overflow.nasl

Version: 1.28

Type: remote

Family: FTP

Published: 6/15/2001

Updated: 7/11/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: Settings/ParanoidReport, ftp/login

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 2/2/2001

Reference Information

CVE: CVE-2001-0325

BID: 2342