CVE-2004-1682

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2004-08-15

Last modified

2024-08-08

Affected products

• Rtp (Qnx)

References

• http://marc.info/?l=bugtraq&m=109511327005476&w=2
• http://secunia.com/advisories/12533
• http://www.rfdslabs.com.br/qnx-advs-04-2004.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17347