Lucene search
HistoryMay 19, 2005 - 4:00 a.m.
CVE-2003-1206
crob ftp server
format string vulnerability
denial of service
remote attackers
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.2 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.7%
Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via “%s” or “%n” sequences in (1) the username during login, or other FTP commands such as (2) dir.
Affected configurations
Node
crobcrob_ftp_serverMatch2.60.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| crob:crob_ftp_server | crob crob ftp server | eq | 2.60.1 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.2 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.7%
Related for CVE-2003-1206