DEBIAN-CVE-2005-3524

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2005-3524
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-3524.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2005-3524
Upstream
Published
2005-11-07T02:02:00Z
Modified
2025-12-15T12:15:34.276712Z
Summary
[none]
Details

Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command.

References

Affected packages

Debian:11 / linux-ftpd-ssl

Package

Name
linux-ftpd-ssl
Purl
pkg:deb/debian/linux-ftpd-ssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.17.18+0.3-5

Ecosystem specific 

{
    "urgency": "high"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-3524.json"

Debian:12 / linux-ftpd-ssl

Package

Name
linux-ftpd-ssl
Purl
pkg:deb/debian/linux-ftpd-ssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.17.18+0.3-5

Ecosystem specific 

{
    "urgency": "high"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-3524.json"

Debian:14 / linux-ftpd-ssl

Package

Name
linux-ftpd-ssl
Purl
pkg:deb/debian/linux-ftpd-ssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.17.18+0.3-5

Affected versions

0.*

0.17.12+0.3-2
0.17.18+0.3-3
0.17.18+0.3-3sarge1
0.17.18+0.3-4

Ecosystem specific 

{
    "urgency": "high"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-3524.json"