CVE:CVE-2008-4247
CNNVD:CNNVD-200809-361
OpenBSD 4.3，FreeBSD 7.0，NetBSD 4.0，Solaris及其他操作系统的ftpd在处理超长的FTP请求时while()循环和fgets()函数错误的将剩余部分的字符串解释为FTP命令。远程攻击者可借助超长的ftp:// URI执行跨站请求伪造攻击并执行任意FTP命令。
solution:Upgrade freebsd freebsd to a higher version than 7.0,and avoid the version 7.0; Upgrade netbsd netbsd to a higher version than 4.0,and avoid the version 4.0; Upgrade openbsd openbsd to a higher version than 4.3,and avoid the version 4.3