返回 CVE 瀏覽器

CVE-2005-2420

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0460%

EPSS Percentile32.99th

Published2005年8月3日

Last Modified2026年4月16日

Vulnerability Description

flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=112230697123357&w=2

🔗 http://secunia.com/advisories/16218

🔗 http://securitytracker.com/id?1014570

🔗 http://www.osvdb.org/18305

🔗 http://www.securityfocus.com/bid/14367

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/21540

🔗 http://marc.info/?l=bugtraq&m=112230697123357&w=2

🔗 http://secunia.com/advisories/16218

相關漏洞威脅

CVE-2005-198310.0

Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows rem...

CVE-2005-242510.0

Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a (1) long ...

CVE-2005-129910.0

The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

CVE-2005-103710.0

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.