Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-2037
mollensoft lightweight ftp server
buffer overflow
denial of service
remote authentication
arbitrary code execution
cve-2004-2037
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
High
0.177 Low
EPSS
Percentile
96.2%
Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the “cd” command in an interactive FTP client.
Affected configurations
Node
mollensoft_softwarelightweight_ftp_serverMatch3.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| mollensoft_software:lightweight_ftp_server | mollensoft software lightweight ftp server | eq | 3.6 |
References
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
High
0.177 Low
EPSS
Percentile
96.2%
Related for CVE-2004-2037