medium5.0Public exploit code
CVE-2004-2074
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BolinTech DreamFTP Server 1.02 - Format String (Metasploit)2010-06-22 · remote · windows · Verified
- BolinTech DreamFTP Server 1.2 (1.02/TryFTP 1.0.0.1) - Remote User Name Format String2004-02-11 · remote · windows · Verified
Impact
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bolintech | Dream Ftp Server | Version 1.02 |