Description

Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."

Remediation

References

CVE-2009-3023

Related Vulnerabilities

Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1999019)

Oracle JRE CVE-2013-5775 Vulnerability (CVE-2013-5775)

MySQL CVE-2017-3317 Vulnerability (CVE-2017-3317)

TYPO3 Cryptographic Issues Vulnerability (CVE-2013-7075)

MySQL CVE-2015-4879 Vulnerability (CVE-2015-4879)

Severity

Critical

Classification

CVE-2009-3023 CWE-120

Tags

Missing Update Known Vulnerabilities