Lucene search

MitreCVE-2004-1682

HistoryFeb 20, 2005 - 5:00 a.m.

CVE-2004-1682

2005-02-2005:00:00

mitre

web.nvd.nist.gov

information security

format string vulnerability

qnx 6.1

ftp client

cve-2004-1682

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.011

Percentile

84.3%

JSON

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.

Affected configurations

Nvd

Node

qnxrtpMatch6.1

VendorProductVersionCPE
qnxrtp6.1cpe:2.3:a:qnx:rtp:6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qnx	rtp	6.1	cpe:2.3:a:qnx:rtp:6.1:::::::*

References

marc.info/?l=bugtraq&m=109511327005476&w=2

secunia.com/advisories/12533

www.rfdslabs.com.br/qnx-advs-04-2004.txt

exchange.xforce.ibmcloud.com/vulnerabilities/17347

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.011

Percentile

84.3%

JSON

Related for CVE-2004-1682