BSD Based FTP Server Multiple glob Function Remote Overflow

critical Nessus Plugin ID 10648


The remote ftp server is affected by a buffer overflow vulnerability.


It was possible to make the remote FTP server crash by creating a huge directory structure and then attempting to list list it using wildcards. This is usually known as the 'ftp glob overflow' attack. It may be possible to exploit this to execute arbitrary code.


Upgrade to the latest version of your FTP software.

See Also

Plugin Details

Severity: Critical

ID: 10648

File Name: ftp_glob_overflow.nasl

Version: 1.40

Type: remote

Family: FTP

Published: 4/16/2001

Updated: 7/11/2018

Risk Information


Risk Factor: Medium

Score: 6.7


Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C


Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Required KB Items: ftp/login, ftp/writeable_dir

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 4/9/2001

Reference Information

CVE: CVE-2001-0247

BID: 2548