CVE-2000-0129

Description

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.

Affected products

• microsoft / windows_95
• microsoft / windows_98
• microsoft / windows_nt4.0 – 4.0

Exploits & proofs of concept

• exploit-dbCat Soft Serv-U FTP Server 2.5/a/b (Windows 95/98/2000/NT 4.0) - Shortcutby Ussr Labs

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0129