CVE-2005-0958 - Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command

Back Back to CVE browser

HIGH

Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command

Published Apr 3, 2005

7.5

HIGH

CVSS 2.0

EPSS 4.43%

Description

Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://unl0ck.org/files/papers/mtftpd.txt
x_refsource_MISCExploitURL Repurposed
http://www.securiteam.com/exploits/5KP0W0AF5K.html
x_refsource_MISCExploit
http://www.securityfocus.com/bid/12947
vdb-entryx_refsource_BIDExploit
http://www.tripbit.org/advisories/TA-040305.txt
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0959
Advisory

Link	Providers	Tags
http://unl0ck.org/files/papers/mtftpd.txt		x_refsource_MISCExploitURL Repurposed
http://www.securiteam.com/exploits/5KP0W0AF5K.html		x_refsource_MISCExploit
http://www.securityfocus.com/bid/12947		vdb-entryx_refsource_BIDExploit
http://www.tripbit.org/advisories/TA-040305.txt		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0959		Advisory