CVE-2004-1626 Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.

MediumCVSS 5.0 EPSS 67.4% Framework module Public exploit

Published: 2005-02-20 07:00
Updated: 2026-06-17 01:08
Exploit status: Public exploit available

Sign in for asset impact Search another CVE

Description

Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.

Affected products

Product	Affected versions	Fixed in
code-crafters ability server	= 2.2.5	No fix listed
code-crafters ability server	= 2.3.2	No fix listed
code-crafters ability server	= 2.3.4	No fix listed

References

20041022 Ability FTP Server 2.34 Buffer Overflow Exploit mailing-list
12941 third-party-advisory vendor-advisory
VU#857846 third-party-advisory us-government-resource
11030 exploit vdb-entry vendor-advisory
11508 exploit vdb-entry vendor-advisory
abilityftpserver-stor-dos(17823) vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 67.39% (percentile 99.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Ability Server 2.34 STOR Command Stack Buffer Overflow Framework module · Metasploit Framework (Rapid7) · 2004-10-22
Ability Server 2.34 (Unix) - FTP 'STOR' Remote Buffer Overflow Exploit · Exploit Database (OffSec) · 2004-11-07
Ability Server 2.34 - FTP 'STOR' Remote Buffer Overflow Exploit · Exploit Database (OffSec) · 2004-10-21