CVE-2011-0507
Last modified
CVE-2011-0507 is a vulnerability of currently unknown severity. FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large number of PORT commands with long arguments, which triggers a NULL pointer dereference. NOTE: some of these details are obtained from third party information.. EPSS estimates a 4.92% chance of exploitation in the next 30 days.
Description
FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.1737, allows remote attackers to cause a denial of service (crash) via a large number of PORT commands with long arguments, which triggers a NULL pointer dereference. NOTE: some of these details are obtained from third party information.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Blackmoonftpserver | Blackmoon Ftp Server | 3.1 |
| Blackmoonftpserver | Blackmoon Ftp Server | 3.1.7.1735 |
| Blackmoonftpserver | Blackmoon Ftp Server | 3.1.7.1736 |
References
- http://secunia.com/advisories/42933Vendor Advisory
- http://secunia.com/advisories/42933Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-0507?
How severe is CVE-2011-0507?
How do I fix CVE-2011-0507?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-0501Stack-based buffer overflow in Music Animation Machine MIDI …
- CVE-2011-0502Music Animation Machine MIDI Player 2006aug19 Release 035 an…
- CVE-2011-0503Cross-site request forgery (CSRF) vulnerability in VaM Shop …
- CVE-2011-0504Multiple cross-site scripting (XSS) vulnerabilities in VaM S…
- CVE-2011-0505Directory traversal vulnerability in system/system.php in Zw…
- CVE-2011-0506Directory traversal vulnerability in modules/profile/user.ph…
- CVE-2011-0508Cross-site scripting (XSS) vulnerability in system/modules/c…
- CVE-2011-0509Cross-site scripting (XSS) vulnerability in Vaadin before 6.…
- CVE-2011-0510SQL injection vulnerability in cart.php in Advanced Webhost …
- CVE-2011-0511SQL injection vulnerability in the allCineVid component (com…
- CVE-2011-0512SQL injection vulnerability in team.php in the Teams Structu…
- CVE-2011-0513DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier…
Are you affected by CVE-2011-0507?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST