Back to CVE Browser

CVE-2007-1731

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1570%

EPSS Percentile1.16th

PublishedMar 28, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple stack-based buffer overflows in High Performance Anonymous FTP Server (hpaftpd) 1.01 allow remote attackers to execute arbitrary code via long arguments to the (1) USER, (2) PASS, (3) CWD, (4) MKD, (5) RMD, (6) DELE, (7) RNFR, or (8) RNTO FTP command.

Affected Platforms (CPE)

📦

Hpaftpd

Hpaftpd

= 1.01

References & Advisories

🔗 http://osvdb.org/35182

🔗 http://www.securiteam.com/securitynews/5AP0L1PKUU.html

🔗 http://www.securityfocus.com/bid/23147

🔗 http://www.vupen.com/english/advisories/2007/1142

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/33288

🔗 http://osvdb.org/35182

🔗 http://www.securiteam.com/securitynews/5AP0L1PKUU.html

🔗 http://www.securityfocus.com/bid/23147

Related Vulnerabilities

CVE-2007-182210.0

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailbo...

CVE-2007-195910.0

Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vector...

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...

CVE-2007-005710.0

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a sh...