CVE-2004-0159 in hsftp

Riassunto

di MITRE

Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Divulgazione: 15/03/2004
• Moderazione: accettato
• Voce: VDB-21646
• CPE: pronto
• CWE: CWE-134 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.09022
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0159
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0159
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0159/