« Volver al listado

CVE-2013-4742

Estado: ModificadaAlta (7.5)—

Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Netwin — Surgeftp

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4742",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-08-09T21:55:07.193",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-07/0149.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/95582",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/54188",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/61403",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85922",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-07/0149.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/95582",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/54188",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/61403",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85922",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en NetWin SurgeFTP anterior a v23d2 permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente ejecutar código arbitrario a través de una cadena larga dentro de la solicitud de autenticación."
    }
  ],
  "lastModified": "2026-06-16T23:57:49.597",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E76384B4-0180-42A5-BD06-B22FB3136E95",
              "versionEndIncluding": "2.3b1"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.0c:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C38E3BA1-DD78-4CB8-A680-B7D99CAD84B8"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "283FCBC2-3C13-491C-A145-4177F7C37EA4"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.0e:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DE7C06B-1376-4095-A284-14F310D7AA5E"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.0f:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C2BB9D2-70AE-4684-B4E7-32610DD9DDC1"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.2k1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0192C7F5-18F3-4157-BA85-8B4D7076C8AE"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.2k3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB19CD1C-42AD-484E-BB72-FDE2A456E8E2"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.2m1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A86FD78-51C7-4834-9B48-255FCD9E927D"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.3a1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "849A502A-DB29-4B16-A891-B0C478D6D560"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.3a2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6ECEB4F1-48B7-495C-9FF6-ACEDD15B0D0D"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.3a6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D73F32DF-1209-4EC7-9C67-661039454DF9"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.3a7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D453D462-56F5-4E8C-A2B5-EADC8D518E12"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.3a8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A250C0AB-BAB2-4719-923B-2D96B6A7F3DD"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.3a9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F6F9844-710C-40BC-9F6F-63D108AD31D4"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.3a10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14534BD9-A84C-4150-827B-9B586E681FBC"
            },
            {
              "criteria": "cpe:2.3:a:netwin:surgeftp:2.3a12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06EE205A-33CE-4847-8350-CB5B7E4274BA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}