CVE-2004-0159 in hsftp
要約 (英語)
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
公開
2004年03月15日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 21646 | Samhain Labs hsftp LS Format String | 134 | 概念実証 | 公式な修正 | CVE-2004-0159 |