CVE-2005-0419: 3com 3cserver

High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command.

Affected products

• 3com 3cserver: version 1.1 only

Published 2005-04-27. Last modified 2026-06-16.