medium5.0Public exploit code
CVE-2004-2081
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sami FTP Server 1.1.3 - Invalid Command Argument Local Denial of Service2004-02-13 · dos · windows · Verified
Impact
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde (~) character or dot dot (/../) or (2) a GET command for an unavailable file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Karjasoft | Sami Ftp Server | Version 1.1.3 |
References
- NVD record
- CVE.org record
- http://www.karja.com/samiftp/news.html
- http://www.securityfocus.com/archive/1/353753
- http://www.securityfocus.com/bid/9657
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15204
- http://www.karja.com/samiftp/news.html
- http://www.securityfocus.com/archive/1/353753
- http://www.securityfocus.com/bid/9657
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15204