CVE-2004-0340

Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2004-11-23

Last modified

2024-08-08

Affected products

• Wftpd (Texas Imperial Software)

References

• http://marc.info/?l=bugtraq&m=107801208004699&w=2
• http://secunia.com/advisories/11001
• http://www.securityfocus.com/bid/9767
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15340