← Back

CVE-2004-0448

nvd nist
Published: Dec 6, 2004Modified: Apr 16, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.

Affected (4)

Products: Jftpgw: Jftpgw
Jftpgw
1 product
Jftpgw
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Jftpgw
Jftpgw
Version 0.13.1
Jftpgw
Version 0.13.2
Jftpgw
Version 0.13.3
Jftpgw
Version 0.13

References (6)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.