CVE-2004-2074 Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.
MediumCVSS 5.0
EPSS 35.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bolintech dream ftp server | = 1.02 | No fix listed |
References
- 1009295 exploit vdb-entry
- 9800 exploit vdb-entry
- dreamftp-command-format-string(15380) vdb-entry