CVE-2004-0325

TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (8) rnfr, (9) rnto, (10) rmd, or (11) xrmd, as demonstrated using "//../qwerty".

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P

EPSS

3.03% chance of exploitation in the next 30 days, 87th percentile

Published

2004-03-18

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23731

References

• CVE Record
• NVD entry

Related

• CVE-2004-0323
• CVE-2004-0326
• CVE-2004-0322
• CVE-2004-0327
• CVE-2004-0319
• CVE-2004-0330