Description Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions mit kerberos 5 1.1.1
1.2
1.2.1
1.2.2
CPE cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:* Remediation No remediation found in references. sgi irix 6.1
6.5.1
6.5.2m
6.5.3
6.5.3f
6.5.3m
6.5.4
6.5.5
6.5.6
6.5.7
6.5.8
6.5.10
6.5.11
Viewing 5 of 13 versions. View all CPE cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:* cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:* Remediation No remediation found in references. freebsd freebsd 2.2
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.8
3.0
3.1
3.2
3.3
3.4
3.5
3.5.1
4.0
4.1
4.1.1
4.2
Viewing 5 of 18 versions. View all CPE cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* Remediation No remediation found in references. netbsd netbsd 1.2.1
1.3
1.3.1
1.3.2
1.3.3
Viewing 5 of 10 versions. View all CPE cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:* cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:* Remediation No remediation found in references. openbsd openbsd 2.3
2.4
2.5
2.6
2.7
Viewing 5 of 6 versions. View all CPE cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:* cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:* cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:* cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:* cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:* cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:* Remediation No remediation found in references.
Change History 10 change records found show changes
Date Action Recorded By Jun 16, 2026 CVE Modified [email protected] Apr 16, 2026 [email protected] Nov 20, 2024 CVE Modified CVE May 14, 2024 CVE Modified [email protected] Jan 21, 2020 CPE Deprecation Remap [email protected] Jan 21, 2020 CPE Deprecation Remap [email protected] Jan 21, 2020 CPE Deprecation Remap [email protected] Jan 21, 2020 CPE Deprecation Remap [email protected] Dec 19, 2017 CVE Modified [email protected] Jan 1, 2004 Initial Analysis [email protected]