CVE-2005-0276

Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) the username, (2) cd, (3) delete, (4) rename, (5) rmdir, (6) literal, (7) stat, or (8) CWD commands.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• 3cdaemon (3com)

References

• http://marc.info/?l=bugtraq&m=110485674622696&w=2
• http://www.securityfocus.com/bid/12155
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18751