| Summary: | Multiple FTP servers employ a glob(3) function. Implementations of the c-shell globbing code are vulnerable to a buffer overflow. By supplying to the FTP server a pattern string containing a set of braces {} followed by an overly long string, a remote attacker can overflow a buffer in the execbrc function and execute arbitrary code on the FTP server. In order to exploit this vulnerability, the attacker must be able to create directories on the FTP server. |
Denotes that component is vulnerable