VULNERABILITY INTELLIGENCE

CVE-2005-2961

CVSS score7.5 HIGH
EPSS probability8.62%
CISA KEVNot currently listed
Published2005-10-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.

Primary references