CVE-2005-0958 | BDVDB-2026-9178 Detail

Description#

Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/12947
http://www.tripbit.org/advisories/TA-040305.txt
http://unl0ck.org/files/papers/mtftpd.txt
http://www.securiteam.com/exploits/5KP0W0AF5K.html

Exploit#

No public exploit known

History#

Version 12005-04-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.