CVE-2004-1682 Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.
HighCVSS 10.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnx rtp | = 6.1 | No fix listed |
References
- 20040913 [RLSA_03-2004] QNX ftp client format string bug mailing-list
- 12533 third-party-advisory vendor-advisory
- www.rfdslabs.com.br
- qnx-ftp-quote-format-string(17347) vdb-entry