CVE-2005-0276 Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) t...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) the username, (2) cd, (3) delete, (4) rename, (5) rmdir, (6) literal, (7) stat, or (8) CWD commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3com 3cdaemon | = 2.0-revision_10 | No fix listed |
References
- 20050104 3Com 3CDaemon Multiple Vulnerabilities mailing-list
- 12155 vdb-entry
- 3cdaemon-login-dos(18751) vdb-entry