Unscored severity · published Sep 15, 2012
CVE-2011-5166
Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT,…
–
CVSS
6.5%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6) PASV, (7) TYPE, (8) STRU, (9) MODE, (10) RETR, (11) STOR, (12) APPE, (13) ALLO, (14) REST, (15) RNFR, (16) RNTO, (17) ABOR, (18) DELE, (19) CWD, (20) LIST, (21) NLST, (22) SITE, (23) STST, (24) HELP, (25) NOOP, (26) MKD, (27) RMD, (28) PWD, (29) CDUP, (30) STOU, (31) SNMT, (32) SYST, and (33) XPWD commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KN
Knftp · Elif Keir
1.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5166
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5166
Exploit
http://archives.neohapsis.com/archives/bugtraq/2011-09/0015.html
Vendor Advisory
http://secunia.com/advisories/45907
Exploit
http://www.exploit-db.com/exploits/17819
Exploit
http://www.exploit-db.com/exploits/17856
Exploit
http://www.exploit-db.com/exploits/17870
Exploit
http://www.exploit-db.com/exploits/18089