VulnerabilityModified
CVE-2004-0340
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.
HIGH 7.2EPSS 1.29%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 1.29% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- texas imperial software/wftpd
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=107801208004699&w=2
- http://secunia.com/advisories/11001
- http://www.securityfocus.com/bid/9767Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15340
- http://marc.info/?l=bugtraq&m=107801208004699&w=2
- http://secunia.com/advisories/11001
- http://www.securityfocus.com/bid/9767Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15340
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.