CVE-2005-1371

Published: May 3, 2005Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.

Affected (1)

Products: Bulletproof: Bulletproof Ftp Server

Bulletproof

1 product

Bulletproof Ftp Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bulletproof Bulletproof Ftp Server	Version 2.4.0.31

References (12)

http://marc.info/?l=bugtraq&m=111464474828477&w=2

Source: cve@mitre.org

http://secunia.com/advisories/15152

Source: cve@mitre.org

http://www.osvdb.org/15898

Source: cve@mitre.org

http://www.securityfocus.com/bid/13410

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/0419

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/20301

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=111464474828477&w=2