Lucene search
HistoryMay 19, 2005 - 4:00 a.m.
CVE-2004-2081
cve-2004-2081
samiftp.dll
sami ftp server
denial of service
pmsystem.exe crash
cd command
get command
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.8%
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde (~) character or dot dot (/…/) or (2) a GET command for an unavailable file.
Affected configurations
Node
karjasoftsami_ftp_serverMatch1.1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| karjasoft:sami_ftp_server | karjasoft sami ftp server | eq | 1.1.3 |
Related
cvelist
cvelist
CVE-2004-2081
2005-05-19 04:00:00
nvd
nvd
CVE-2004-2081
2004-12-31 05:00:00
nessus
nessus
Sami FTP Server Multiple DoS
2004-02-17 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.8%
Related for CVE-2004-2081