CVEvulnerability
CVE-2004-0448
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.
Affected configurations
• jftpgw jftpgw 0.13
• jftpgw jftpgw 0.13.1
• jftpgw jftpgw 0.13.2
• jftpgw jftpgw 0.13.3
References
- http://www.debian.org/security/2004/dsa-510 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10438 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16271 exchange.xforce.ibmcloud.com
- http://www.debian.org/security/2004/dsa-510 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10438 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16271 exchange.xforce.ibmcloud.com