CVE-2010-3187

Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

• CWE-119

• http://aix.software.ibm.com/aix/efixes/security/ftpd_advisory.ascPatch, Vendor Advisory
• http://seclists.org/fulldisclosure/2010/Jul/281Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2010/Jul/317Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2010/Jul/324Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2010/Jul/337Mailing List, Third Party Advisory
• http://securitytracker.com/id?1024368Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/14409/Exploit, Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/14456/Exploit, Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=isg1IZ83252Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ83274Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ83275Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ83276Vendor Advisory
• http://www.osvdb.org/66576Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11697Third Party Advisory
• http://aix.software.ibm.com/aix/efixes/security/ftpd_advisory.ascPatch, Vendor Advisory
• http://seclists.org/fulldisclosure/2010/Jul/281Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2010/Jul/317Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2010/Jul/324Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2010/Jul/337Mailing List, Third Party Advisory
• http://securitytracker.com/id?1024368Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/14409/Exploit, Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/14456/Exploit, Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=isg1IZ83252Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ83274Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ83275Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=isg1IZ83276Vendor Advisory
• http://www.osvdb.org/66576Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11697Third Party Advisory

Published

Aug 30, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3179Stack-based buffer overflow in the text-rendering functional…
• CVE-2010-3180Use-after-free vulnerability in the nsBarProp function in Mo…
• CVE-2010-3181Untrusted search path vulnerability in Mozilla Firefox befor…
• CVE-2010-3182A certain application-launch script in Mozilla Firefox befor…
• CVE-2010-3183The LookupGetterOrSetter function in js3250.dll in Mozilla F…
• CVE-2010-3186IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, …
• CVE-2010-3188SQL injection vulnerability in search.aspx in BugTracker.NET…
• CVE-2010-3189The extSetOwner function in the UfProxyBrowserCtrl ActiveX c…
• CVE-2010-3190Untrusted search path vulnerability in the Microsoft Foundat…7.8
• CVE-2010-3191Untrusted search path vulnerability in Adobe Captivate 5.0.0…
• CVE-2010-3192Certain run-time memory protection mechanisms in the GNU C L…
• CVE-2010-3193Unspecified vulnerability in the DB2STST program in IBM DB2 …