Back to CVE Browser

CVE-2005-2420

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0460%

EPSS Percentile32.99th

PublishedAug 3, 2005

Last ModifiedApr 16, 2026

Vulnerability Description

flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=112230697123357&w=2

🔗 http://secunia.com/advisories/16218

🔗 http://securitytracker.com/id?1014570

🔗 http://www.osvdb.org/18305

🔗 http://www.securityfocus.com/bid/14367

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/21540

🔗 http://marc.info/?l=bugtraq&m=112230697123357&w=2

🔗 http://secunia.com/advisories/16218

Related Vulnerabilities

CVE-2005-473010.0

Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the...

CVE-2005-103710.0

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.

CVE-2005-129910.0

The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

CVE-2005-044110.0

Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticat...