CVE-2004-0159 in hsftp
Summary
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Disclosure
03/15/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 21646 | Samhain Labs hsftp LS format string | 134 | Proof-of-Concept | Official fix | CVE-2004-0159 |