Vulnerability Details CVE-2004-0341
WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.2%
CVSS Severity
CVSS v2 Score 2.1
References
- http://marc.info/?l=bugtraq&m=107801142924976&w=2
- http://secunia.com/advisories/11001
- http://www.osvdb.org/4115
- http://www.securityfocus.com/bid/9767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15341
- http://marc.info/?l=bugtraq&m=107801142924976&w=2
- http://secunia.com/advisories/11001
- http://www.osvdb.org/4115
- http://www.securityfocus.com/bid/9767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15341
Products affected by CVE-2004-0341
-
cpe:2.3:a:texas_imperial_software:wftpd:3.0
-
cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r3
-
cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r4
-
cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r5
-
cpe:2.3:a:texas_imperial_software:wftpd:3.10_r1
-
cpe:2.3:a:texas_imperial_software:wftpd:3.20
-
cpe:2.3:a:texas_imperial_software:wftpd:3.21
-
cpe:2.3:a:texas_imperial_software:wftpd:pro_3.10_r1
-
cpe:2.3:a:texas_imperial_software:wftpd:pro_3.20
-
cpe:2.3:a:texas_imperial_software:wftpd:pro_3.21