Lucene search

K
cve[email protected]CVE-2004-0277
HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0277

2004-11-2305:00:00
NVD-CWE-Other
web.nvd.nist.gov
25
cve-2004-0277
dream ftp
format string vulnerability
remote attackers
denial of service
crash
arbitrary code
nvd
security issue

8 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.112 Low

EPSS

Percentile

95.1%

Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.

8 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.112 Low

EPSS

Percentile

95.1%

Related for CVE-2004-0277