CVEvulnerability
CVE-2004-1118
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.
Affected configurations
• weonlydo wodftpdlx activex component
• weonlydo wodftpdlx activex component 2.1.1 8
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html lists.grok.org.uk
- http://marc.info/?l=bugtraq&m=110114233323417&w=2 marc.info
- http://www.securityfocus.com/bid/11721 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18190 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html lists.grok.org.uk
- http://marc.info/?l=bugtraq&m=110114233323417&w=2 marc.info
- http://www.securityfocus.com/bid/11721 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18190 exchange.xforce.ibmcloud.com