CVE-2005-1371 BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.
HighCVSS 7.2
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bulletproof ftp server | = 2.4.0.31 | No fix listed |
References
- 20050427 Privilege escalation in BulletProof FTP Server v2.4.0.31 mailing-list
- 15152 third-party-advisory
- 15898 vdb-entry
- 13410 exploit vdb-entry
- ADV-2005-0419 vdb-entry
- bpftp-gain-privilege(20301) vdb-entry