CVE-2004-0340 EXPLOIT
7.2
HIGH · CVSS 2.0 · EPSS 1.3% (pctl 70)
Patch early
A public exploit exists.
Description
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.
Scoring
| CVSS | 7.2 (HIGH, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 1.3% — more likely to be exploited than 70% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-11-23 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| texas imperial software | wftpd |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | WFTPD Server 3.21 - Remote Buffer Overflow | 2004-02-29 |
References
- http://marc.info/?l=bugtraq&m=107801208004699&w=2
- http://secunia.com/advisories/11001
- http://www.securityfocus.com/bid/9767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15340
- http://marc.info/?l=bugtraq&m=107801208004699&w=2
- http://secunia.com/advisories/11001
- http://www.securityfocus.com/bid/9767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15340
→ the Explorer · watch your stack · NVD