CVEvulnerability

CVE-2005-0958

7.5 HIGH Published 2005-05-02 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-05-02
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.

Affected configurations

• yepyep mtftpd 0.1a • yepyep mtftpd 0.2 • yepyep mtftpd 0.3

References

http://unl0ck.org/files/papers/mtftpd.txt Exploit, URL Repurposed
http://www.securiteam.com/exploits/5KP0W0AF5K.html Exploit
http://www.securityfocus.com/bid/12947 Exploit
http://www.tripbit.org/advisories/TA-040305.txt www.tripbit.org
http://unl0ck.org/files/papers/mtftpd.txt Exploit, URL Repurposed
http://www.securiteam.com/exploits/5KP0W0AF5K.html Exploit
http://www.securityfocus.com/bid/12947 Exploit
http://www.tripbit.org/advisories/TA-040305.txt www.tripbit.org