Lucene search
HistoryJan 18, 2007 - 2:28 a.m.
CVE-2007-0338
cve-2007-0338
dream ftp server
buffer overflow
remote code execution
format string specifier
security vulnerability
8.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.084 Low
EPSS
Percentile
94.4%
Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers, which triggers the overflow during processing of the Server Log.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bolintech:dreamftp_server | bolintech dreamftp server | eq | * |
Related
securityvulns
securityvulns
WinFTP FTP server / Dream FTP Server buffer overflow
2006-12-21 00:00:00
DreamFTP formatstring bug
2004-02-09 00:00:00
cvelist
cvelist
CVE-2007-0338
2007-01-18 02:00:00
prion
prion
Heap overflow
2007-01-18 02:28:00
8.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.084 Low
EPSS
Percentile
94.4%
Related for CVE-2007-0338