Unrated severityNVD Advisory· Published Jan 7, 2010· Updated Jun 16, 2026
CVE-2009-4593
CVE-2009-4593
Description
The bftpdutmp_log function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string value of the ut.bu_host structure member, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:jesse_smith:bftpd:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:jesse_smith:bftpd:*:*:*:*:*:*:*:*range: <=2.3
- cpe:2.3:a:jesse_smith:bftpd:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:jesse_smith:bftpd:2.2.1:*:*:*:*:*:*:*
- (no CPE)range: <2.4
Patches
Vulnerability mechanics
References
5- bftpd.sourceforge.net/news.htmlnvdPatch
- www.securityfocus.com/bid/36820nvdPatch
- www.vupen.com/english/advisories/2009/3032nvdPatchVendor Advisory
- secunia.com/advisories/37185nvdVendor Advisory
- bftpd.sourceforge.net/downloads/CHANGELOGnvd
News mentions
0No linked articles in our index yet.