CVE-2008-3734

2008-08-2016:41:00

CWE-134

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.113

Percentile

95.2%

JSON

Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in a connection greeting (response).

Affected configurations

Nvd

Node

ipswitchws_ftp_homeMatch2007.0.0.2

ipswitchws_ftp_proMatch2007.1.0.0

VendorProductVersionCPE
ipswitchws_ftp_home2007.0.0.2cpe:2.3:a:ipswitch:ws_ftp_home:2007.0.0.2:*:*:*:*:*:*:*
ipswitchws_ftp_pro2007.1.0.0cpe:2.3:a:ipswitch:ws_ftp_pro:2007.1.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ipswitch	ws_ftp_home	2007.0.0.2	cpe:2.3:a:ipswitch:ws_ftp_home:2007.0.0.2:::::::*
ipswitch	ws_ftp_pro	2007.1.0.0	cpe:2.3:a:ipswitch:ws_ftp_pro:2007.1.0.0:::::::*