CVE-2004-0298 CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.

MediumCVSS 5.0 EPSS 3.1% PoC

Published: 2004-03-18 07:00
Updated: 2026-06-17 01:05
Exploit status: Proof-of-concept only

Sign in for asset impact Search another CVE

Description

CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.

Affected products

Product	Affected versions	Fixed in
aclogic cesarftp	= 0.99e	No fix listed

References

20040217 CesarFTP 0.99 : 100% employment of computer resources mailing-list
9666 exploit vdb-entry vendor-advisory
cesarftp-userpass-dos(15252) vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.10% (percentile 88.0)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

ACLogic CesarFTP 0.99 - Remote Resource Exhaustion (Denial of Service) PoC · Exploit Database (OffSec) · 2004-02-16