CVE-2004-0069

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-02-17

Last modified

2024-08-08

Affected products

• Windows Ftp Server (Hd Soft)

References

• http://marc.info/?l=bugtraq&m=107367110805273&w=2
• http://marc.info/?l=bugtraq&m=107401398014761&w=2
• http://www.securityfocus.com/bid/9385
• http://www.securitytracker.com/id?1008658