CVE-2005-0277
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to...
CVE-2005-0277 is a medium vulnerability (CVSS 5.0) in 3com 3cdaemon, published February 10, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 61.9%, the 99th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 61.9%EPSS, 99th percentile
- Exploitation
- None known4 public exploits
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | 3Com 3CDaemon 2.0 FTP Username Overflow | 2005-01-04 |
| Exploit-DB | 3Com FTP Server 2.0 - Remote Overflow | 2005-02-17 |
| Exploit-DB | 3Com 3CDaemon FTP - Unauthorized 'USER' Remote Buffer Overflow | 2005-02-18 |
| Exploit-DB | 3Com 3CDaemon 2.0 FTP Server - 'Username' Remote Overflow (Metasploit) | 2010-09-20 |
What each source reports
NVD Score used
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
- Record
CVE-2005-0277- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
- Record
CVE-2005-0277- Updated
- 2026-11-02
EUVDEUVD-2005-0278No score
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
- Record
EUVD-2005-0278- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5rj-47p6-wxcmNo score
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to...
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
- Record
GHSA-r5rj-47p6-wxcm- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.