Lucene search
HistoryMay 03, 2005 - 4:00 a.m.
CVE-2005-1371
cve-2005-1371
bpftpserver
bulletproof ftp server
privilege escalation
local exploit
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.
Affected configurations
Node
bulletproofbulletproof_ftp_serverMatch2.4.0.31
| CPE | Name | Operator | Version |
|---|---|---|---|
| bulletproof:bulletproof_ftp_server | bulletproof bulletproof ftp server | eq | 2.4.0.31 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2005-1371