CVE-2003-1319

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via (1) a long response to a PWD command, which triggers a stack-based overflow, and (2) a long line in a response to a file LIST command, which triggers a heap-based overflow.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2003-06/0083.htmlVendor Advisory
http://secunia.com/advisories/8998Patch, Vendor Advisory
http://security.nnov.ru/docs4679.htmlVendor Advisory
http://securitytracker.com/id?1006956Vendor Advisory
http://www.securityfocus.com/bid/7858Patch
http://www.securityfocus.com/bid/7861Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/12228
https://exchange.xforce.ibmcloud.com/vulnerabilities/12231
http://archives.neohapsis.com/archives/bugtraq/2003-06/0083.htmlVendor Advisory
http://secunia.com/advisories/8998Patch, Vendor Advisory
http://security.nnov.ru/docs4679.htmlVendor Advisory
http://securitytracker.com/id?1006956Vendor Advisory
http://www.securityfocus.com/bid/7858Patch
http://www.securityfocus.com/bid/7861Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/12228
https://exchange.xforce.ibmcloud.com/vulnerabilities/12231

Timeline

Published: Dec 31, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-13205.1SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Inter CVE-2003-13217.5Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a CVE-2003-132210.0Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrar CVE-2003-13236.8Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and CVE-2003-13244.6Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, al CVE-2003-13255.2The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated CVE-2003-13267.5Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitra CVE-2003-13279.3Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that suppo CVE-2003-13287.5The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote at CVE-2003-13297.8ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does CVE-2003-13305.0Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-m CVE-2003-13314.0Stack-based buffer overflow in the mysql_real_connect function in the MySql client library (libmysqlclient) 4.0.13 and earlier allows local