Vulnerability in Gproftpd
CVE-2005-0484
Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.
EPSS: 0.108 (95.4th percentile) — read the EPSS interpretation.
Affected products
- Gproftpd
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Vendor Advisory)