CVE-2012-5002

Description

Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.

References

https://github.com/ret2eax/exploits

https://exchange.xforce.ibmcloud.com/vulnerabilities/73591

https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-4926

http://www.securityfocus.com/bid/52235

http://www.osvdb.org/79691

http://security.inshell.net/advisory/5

http://secunia.com/advisories/47912

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS