PT-2004-1280 · Hd Soft · Hd Soft Windows Ftp Server

Peter Winter-Smith · Published 2004-01-15 · Updated 2016-10-18 · CVE-2004-0069

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HD Soft Windows FTP Server versions 1.6 and earlier

Description The issue allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.

Recommendations For HD Soft Windows FTP Server versions 1.6 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-0069

Affected Products

Hd Soft Windows Ftp Server

References · 6

• 🔥 https://exploit-db.com/exploits/23531 · Exploit
• 🔥 http://securityfocus.com/bid/9385 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0069 · Security Note
• http://marc.info/?l=bugtraq&m=107367110805273&w=2 · Note
• http://securitytracker.com/id?1008658 · Note
• http://marc.info/?l=bugtraq&m=107401398014761&w=2 · Note