VulnerabilityModified
CVE-2005-0484
Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.
HIGH 7.5EPSS 10.8%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 10.85% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- gproftpd/gproftpd
- Source
- cve@mitre.org
References
- http://bugs.gentoo.org/show_bug.cgi?id=81894Exploit, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200502-26.xmlVendor Advisory
- http://bugs.gentoo.org/show_bug.cgi?id=81894Exploit, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200502-26.xmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.