CVE-2004-0069 Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wsca...
HighCVSS 7.5
EPSS 9.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hd soft windows ftp server | <= 1.6 | No fix listed |
References
- 20040108 Windows FTP Server Format String Vulnerability mailing-list
- 20040113 exploit for HD Soft Windows FTP Server 1.6 mailing-list
- 9385 exploit vdb-entry vendor-advisory
- 1008658 vdb-entry