Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0958
cve
2005
0958
format string
vulnerability
log_do
mtftpd
remote code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.047 Low
EPSS
Percentile
92.7%
Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.
Affected configurations
Node
yepyepmtftpdMatch0.1a
ORyepyepmtftpdMatch0.2
ORyepyepmtftpdMatch0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| yepyep:mtftpd | yepyep mtftpd | eq | 0.1a |
| yepyep:mtftpd | yepyep mtftpd | eq | 0.2 |
| yepyep:mtftpd | yepyep mtftpd | eq | 0.3 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.047 Low
EPSS
Percentile
92.7%
Related for CVE-2005-0958