CVE-2004-0448 Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.
HighCVSS 10.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jftpgw | = 0.13 | No fix listed |
| jftpgw | = 0.13.1 | No fix listed |
| jftpgw | = 0.13.2 | No fix listed |
| jftpgw | = 0.13.3 | No fix listed |
References
- DSA-510 patch vendor-advisory
- 10438 patch vdb-entry vendor-advisory
- jftpgw-log-format-string(16271) vdb-entry