CVE-2005-2961

Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

8.62% chance of exploitation in the next 30 days, 95th percentile

Published

2005-10-05

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1238

References

• CVE Record
• NVD entry

Related

• CVE-2005-2956
• CVE-2005-2967
• CVE-2005-2954
• CVE-2005-2968
• CVE-2005-2953
• CVE-2005-2973