CVE-2004-0159 in hsftp

الملخص

بحسب MITRE

Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• إفشاء: 15/03/2004
• الاعتدال: تمت الموافقة
• إدخال: VDB-21646
• CPE: جاهز
• CWE: CWE-134 (مؤكد)
• استغلال: تحميل
• CVSS: 7.5 (NVD)
• EPSS: 0.09022
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0159
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0159
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0159/