Microsoft IIS FTP Server NLST Long Directory Name Buffer Overflow

Strike ID:
E09-2bz01
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
1
Year:
2009

Description

This strike sends an NLST command to a vulnerable FTP server, which results in a stack buffer overflow if a directory name is very long.

CVE

Bid