CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
94.8%
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an “ls” command.
Vendor | Product | Version | CPE |
---|---|---|---|
samhain_labs | hsftp | 1.4 | cpe:2.3:a:samhain_labs:hsftp:1.4:*:*:*:*:*:*:* |
samhain_labs | hsftp | 1.5 | cpe:2.3:a:samhain_labs:hsftp:1.5:*:*:*:*:*:*:* |
samhain_labs | hsftp | 1.6 | cpe:2.3:a:samhain_labs:hsftp:1.6:*:*:*:*:*:*:* |
samhain_labs | hsftp | 1.7 | cpe:2.3:a:samhain_labs:hsftp:1.7:*:*:*:*:*:*:* |
samhain_labs | hsftp | 1.9 | cpe:2.3:a:samhain_labs:hsftp:1.9:*:*:*:*:*:*:* |
samhain_labs | hsftp | 1.10 | cpe:2.3:a:samhain_labs:hsftp:1.10:*:*:*:*:*:*:* |
samhain_labs | hsftp | 1.11 | cpe:2.3:a:samhain_labs:hsftp:1.11:*:*:*:*:*:*:* |