Vulnerability Details : CVE-2010-4221

Products affected by CVE-2010-4221

Metasploit modules for CVE-2010-4221

• ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (Linux)

  Disclosure Date: 2010-11-01

  First seen: 2020-04-26

  exploit/linux/ftp/proftp_telnet_iac

  This module exploits a stack-based buffer overflow in versions of ProFTPD server between versions 1.3.2rc3 and 1.3.3b. By sending data containing a large number of Telnet IAC commands, an attacker can corrupt memory and execute arbitrary code. The Debian S

  More information

• ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (FreeBSD)

  Disclosure Date: 2010-11-01

  First seen: 2020-04-26

  exploit/freebsd/ftp/proftp_telnet_iac

  This module exploits a stack-based buffer overflow in versions of ProFTPD server between versions 1.3.2rc3 and 1.3.3b. By sending data containing a large number of Telnet IAC commands, an attacker can corrupt memory and execute arbitrary code. Authors: - j

  More information

CVSS scores for CVE-2010-4221

CWE ids for CVE-2010-4221

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
  Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-4221