CVE-2005-2961
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with...
CVE-2005-2961 is a high vulnerability (CVSS 7.5) in Prozilla Download Accelerator, published October 1, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.62%, the 95th percentile. Fixed in prozilla 1:1.3.6-3woody3.
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.
- Record
CVE-2005-2961- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.
- Record
CVE-2005-2961- Updated
- 2026-11-02
EUVDEUVD-2005-2961 No score
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.
- Record
EUVD-2005-2961- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9g2q-qghv-228v No score
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with...
Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an <A> tag.
- Record
GHSA-9g2q-qghv-228v- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
prozillaDebian:3.0 |
before 1:1.3.6-3woody3, plus listed versions 1:1.3.6-31:1.3.6-3woody11:1.3.6-3woody2 |
1:1.3.6-3woody3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Prozilla 1.3.7.4 - 'ftpsearch' Results Handling Buffer Overflow | 2005-10-02 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |