Lucene search

K
freebsdFreeBSD65A17A3F-ED6E-11D8-AFF1-00061BC2AD93
HistoryMay 30, 2004 - 12:00 a.m.

Arbitrary code execution via a format string vulnerability in jftpgw

2004-05-3000:00:00
vuxml.freebsd.org
10

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.5%

The log functions in jftpgw may allow
remotely authenticated user to execute
arbitrary code via the format string
specifiers in certain syslog messages.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjftpgw< 0.13.5UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.5%

Related for 65A17A3F-ED6E-11D8-AFF1-00061BC2AD93