3Com 3CServer FTP Server < 2.0 Remote Overflow

Medium Nessus Network Monitor Plugin ID 2595


The remote host is vulnerable to a buffer overflow.


The remote host is vulnerable to several remote overflows. An attacker exploiting these flaws would need to be able to log into the FTP server and run standard FTP commands. If anonymous access is enabled, the 'Anonymous' account would be sufficient to generate the overflow on the remote machine.


Upgrade to version 2.0 or higher.

Plugin Details

Severity: Medium

ID: 2595

File Name: 2595.prm

Family: FTP Servers

Published: 2005/02/07

Modified: 2016/01/21

Dependencies: 1803, 1804

Risk Information

Risk Factor: Medium


Base Score: 5

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:F/RL:U/RC:ND


Base Score: 5.3

Temporal Score: 5.2


Temporal Vector: CVSS3#E:F/RL:U/RC:X

Exploitable With

Metasploit (3Com 3CDaemon 2.0 FTP Username Overflow)

Reference Information

CVE: CVE-2005-0278, CVE-2005-0276, CVE-2005-0277

BID: 12155, 12463

OSVDB: 12810, 12811