Unscored severity · published Aug 12, 2002
CVE-2002-0768
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LU
Lukemftp · Luke Mewburn
through 1.5 · source: NVD
SL
Suse Linux · Suse
6.4; 7.0; 7.1; 7.2; 7.3; 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0768
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0768
Patch
http://www.iss.net/security_center/static/9130.php
www.novell.com
http://www.novell.com/linux/security/advisories/2002_18_lukemftp.html
More from Lukemftp
–
CVE-2004-0794
Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code
–
CVE-2002-0600
Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request