Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0277
cve-2004-0277
dream ftp
format string vulnerability
remote attackers
denial of service
crash
arbitrary code
nvd
security issue
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.112 Low
EPSS
Percentile
95.2%
Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.
Affected configurations
Node
bolintechdream_ftp_serverMatch1.02
| CPE | Name | Operator | Version |
|---|---|---|---|
| bolintech:dream_ftp_server | bolintech dream ftp server | eq | 1.02 |
Related
cvelist
cvelist
CVE-2004-0277
2004-03-18 05:00:00
exploitdb
exploitdb
BolinTech Dream FTP Server 1.0 User Name Format String Vulnerability 2
2004-02-07 00:00:00
nvd
nvd
CVE-2004-0277
2004-11-23 05:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.112 Low
EPSS
Percentile
95.2%
Related for CVE-2004-0277