[CVE-2014-8517] – a dangerous vulnerability in FTP-client, which allows the attacker to use a utility ftp.exe interactively and execute arbitrary commands on the victim’s computer.
The vulnerability is due to an error in the function “fetch_url ()” in the script /src/usr.bin/ftp/fetch.c when processing URL. A remote user can execute arbitrary code on the target system.
more here..........http://malwarelist.net/2014/11/05/remote-command-execution-in-freebsd/
The vulnerability is due to an error in the function “fetch_url ()” in the script /src/usr.bin/ftp/fetch.c when processing URL. A remote user can execute arbitrary code on the target system.
more here..........http://malwarelist.net/2014/11/05/remote-command-execution-in-freebsd/