Lucene search

K
cveMitreCVE-2005-0312
HistoryFeb 10, 2005 - 5:00 a.m.

CVE-2005-0312

2005-02-1005:00:00
mitre
web.nvd.nist.gov
28
4
warftpd
denial of service
nt service
authenticated users
cve-2005-0312
access violation
format string vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.003

Percentile

71.6%

WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of “%s” sequences, possibly indicating a format string vulnerability.

Affected configurations

Nvd
Node
war_ftp_daemonwar_ftp_daemonMatch1.8
OR
war_ftp_daemonwar_ftp_daemonMatch1.82_rc9
VendorProductVersionCPE
war_ftp_daemonwar_ftp_daemon1.8cpe:2.3:a:war_ftp_daemon:war_ftp_daemon:1.8:*:*:*:*:*:*:*
war_ftp_daemonwar_ftp_daemon1.82_rc9cpe:2.3:a:war_ftp_daemon:war_ftp_daemon:1.82_rc9:*:*:*:*:*:*:*

Social References

More

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.003

Percentile

71.6%

Related for CVE-2005-0312