Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0958
cve
2005
0958
format string
vulnerability
log_do
mtftpd
remote code execution
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.047 Low
EPSS
Percentile
92.5%
Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yepyep:mtftpd | yepyep mtftpd | eq | 0.2 |
| yepyep:mtftpd | yepyep mtftpd | eq | 0.3 |
| yepyep:mtftpd | yepyep mtftpd | eq | 0.1a |
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.047 Low
EPSS
Percentile
92.5%