CVE-2005-0958

Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:yepyep:mtftpd:0.1a:*:*:*:*:*:*:*
cpe:2.3:a:yepyep:mtftpd:0.2:*:*:*:*:*:*:*
cpe:2.3:a:yepyep:mtftpd:0.3:*:*:*:*:*:*:*

History

14 Feb 2024, 01:17

Type Values Removed Values Added
References () http://unl0ck.org/files/papers/mtftpd.txt - Exploit () http://unl0ck.org/files/papers/mtftpd.txt - Exploit, URL Repurposed

Information

Published : 2005-05-02 04:00

Updated : 2024-02-14 01:17


NVD link : CVE-2005-0958

Mitre link : CVE-2005-0958

CVE.ORG link : CVE-2005-0958


JSON object : View

Products Affected

yepyep

  • mtftpd