CVE-2004-2081 in Sami FTP Server
Summary
by MITRE
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde (~) character or dot dot (/../) or (2) a GET command for an unavailable file.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 08/06/2025
The vulnerability identified as CVE-2004-2081 resides within the samiftp.dll library component of Sami FTP Server version 1.1.3, representing a classic denial of service weakness that can be exploited by local users to disrupt system operations. This flaw specifically targets the server's handling of file path navigation and file access commands, creating a scenario where legitimate system processes can be terminated unexpectedly. The vulnerability demonstrates a fundamental lack of proper input validation and error handling within the FTP server's core functionality, particularly when processing user commands that manipulate file system navigation.
The technical implementation of this vulnerability exploits two distinct attack vectors that leverage malformed command inputs to trigger system instability. The first vector involves the execution of a CD command containing either a tilde character or dot dot sequences, which represents a classic path traversal attack pattern that can confuse the server's directory navigation logic. The second vector targets the GET command functionality when attempting to access files that do not exist or are otherwise unavailable, causing the pmsystem.exe process to crash. Both attack methods exploit the underlying assumption that user inputs will conform to expected formats, failing to properly sanitize or validate command parameters before processing them within the server's execution context.
The operational impact of this vulnerability extends beyond simple service disruption, as it represents a potential security risk that local users can leverage to compromise system availability. When the pmsystem.exe process crashes, it can result in complete service interruption for the FTP server, affecting legitimate users who depend on file transfer capabilities. This type of denial of service attack can be particularly problematic in environments where continuous availability is critical, as it may require manual intervention to restore service. The vulnerability also demonstrates poor defensive programming practices where the system fails to implement proper exception handling and input validation mechanisms that would prevent malformed commands from causing system-wide crashes.
Mitigation strategies for CVE-2004-2081 should focus on implementing robust input validation and sanitization measures within the FTP server's command processing logic. System administrators should consider upgrading to patched versions of Sami FTP Server or implementing network-level restrictions to limit local access to the server. The vulnerability aligns with CWE-20, which addresses improper input validation, and represents a clear violation of secure coding principles that should be addressed through comprehensive code review and defensive programming practices. Additionally, implementing process monitoring and automatic restart mechanisms can help mitigate the impact of service disruptions caused by this vulnerability, while adherence to ATT&CK framework concepts related to privilege escalation and denial of service provides a structured approach to understanding and defending against such attacks.