CVE-2005-0277
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to...
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
- Record
CVE-2005-0277- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
- Record
CVE-2005-0277- Updated
- 2026-11-02
EUVDEUVD-2005-0278 No score
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
- Record
EUVD-2005-0278- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5rj-47p6-wxcm No score
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to...
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
- Record
GHSA-r5rj-47p6-wxcm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | 3Com 3CDaemon 2.0 FTP Server - 'Username' Remote Overflow (Metasploit) | 2010-09-20 |
| Exploit-DB | 3Com FTP Server 2.0 - Remote Overflow | 2005-02-17 |
| Exploit-DB | 3Com 3CDaemon FTP - Unauthorized 'USER' Remote Buffer Overflow | 2005-02-18 |
| Metasploit | 3Com 3CDaemon 2.0 FTP Username Overflow | 2005-01-04 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0277 is a medium vulnerability (CVSS 5.0) in 3com 3cdaemon, published February 10, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 61.9%, the 99th percentile. No source names a fixed version.