CVE-2004-0069

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

9.77% chance of exploitation in the next 30 days, 95th percentile

Published

2004-01-15

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=107401398014761&w=2

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23531

References

• CVE Record
• NVD entry

Related

• CVE-2004-0067
• CVE-2004-0070
• CVE-2004-0064
• CVE-2004-0071
• CVE-2004-0046
• CVE-2004-0072