Lucene search
HistoryJan 06, 2005 - 5:00 a.m.
CVE-2004-1327
cve-2004-1327
buffer overflow
crystal ftp client
remote execution
arbitrary code
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.6%
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.
Affected configurations
Node
crystal_art_softwarecrystal_ftpMatch2.4
ORcrystal_art_softwarecrystal_ftpMatch2.5
ORcrystal_art_softwarecrystal_ftpMatch2.6
ORcrystal_art_softwarecrystal_ftpMatch2.7
ORcrystal_art_softwarecrystal_ftpMatch2.8
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.6%
Related for CVE-2004-1327