CVE-2007-5184

Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

12.47% chance of exploitation in the next 30 days, 96th percentile

Published

2007-10-03

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://debork.se/poc/001_smbftpd.c

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4478

References

• CVE Record
• NVD entry

Related

• CVE-2007-5181
• CVE-2007-5185
• CVE-2007-5180
• CVE-2007-5186
• CVE-2007-5178
• CVE-2007-5187