10.0
CRITICAL
CVE-2010-3972
"IIS FTP Service Heap Buffer Overrun Vulnerability"
Description

Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.

INFO

Published Date :

Dec. 23, 2010, 6 p.m.

Last Modified :

Feb. 5, 2021, 3:37 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

10.0

Exploitability Score :

10.0
Public PoC/Exploit Available at Github

CVE-2010-3972 has a 3 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2010-3972 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Microsoft internet_information_services
: Total Affected Vendor : 1 | Products : 1
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2010-3972.

URL Resource
http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx
http://secunia.com/advisories/42713 Vendor Advisory
http://www.exploit-db.com/exploits/15803 Exploit
http://www.kb.cert.org/vuls/id/842372 US Government Resource
http://www.securityfocus.com/bid/45542 Exploit
http://www.securitytracker.com/id?1024921
http://www.vupen.com/english/advisories/2010/3305 Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-004
https://exchange.xforce.ibmcloud.com/vulnerabilities/64248
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12370

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
bioly230/THM_Alfred

None

Updated: 1 year, 3 months ago
0 stars 0 fork 0 watcher
Born at : June 26, 2023, 6:37 p.m. This repo has been linked 3 different CVEs too.
Profile Photo
dominicporter/shodan-playing

None

JavaScript

Updated: 4 years, 6 months ago
0 stars 0 fork 0 watcher
Born at : March 29, 2020, 11:07 a.m. This repo has been linked 6 different CVEs too.
Profile Photo
Romulus968/copycat

Copycat Toolkit is a set of tools to view information about hostname, IP’s vulnerabilities, internet of things or for real-time internet scanning.

Shell Python

Updated: 1 month, 1 week ago
1 stars 23 fork 23 watcher
Born at : Sept. 12, 2019, 4:02 p.m. This repo has been linked 5 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2010-3972 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2010-3972 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CPE Deprecation Remap by [email protected]

    Feb. 05, 2021

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:a:microsoft:internet_information_server:7.5:*:*:*:*:*:*:* OR *cpe:2.3:a:microsoft:internet_information_services:7.5:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Jul. 03, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:a:microsoft:iis:7.5:*:*:*:*:*:*:* OR *cpe:2.3:a:microsoft:internet_information_server:7.5:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Oct. 12, 2018

    Action Type Old Value New Value
    Removed Reference http://www.microsoft.com/technet/security/Bulletin/MS11-004.mspx [No Types Assigned]
    Added Reference https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-004 [No Types Assigned]
  • CVE Modified by [email protected]

    Sep. 19, 2017

    Action Type Old Value New Value
    Removed Reference http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12370 [No Types Assigned]
    Added Reference https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12370 [No Types Assigned]
  • CVE Modified by [email protected]

    Aug. 17, 2017

    Action Type Old Value New Value
    Removed Reference http://xforce.iss.net/xforce/xfdb/64248 [No Types Assigned]
    Added Reference https://exchange.xforce.ibmcloud.com/vulnerabilities/64248 [No Types Assigned]
  • Initial Analysis by [email protected]

    Dec. 23, 2010

    Action Type Old Value New Value
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

96.79 }} 0.10%

score

0.99717

percentile

CVSS2 - Vulnerability Scoring System
Access Vector
Access Complexity
Authentication
Confidentiality
Integrity
Availability
: