high7.5Public exploit code
CVE-2005-0958
Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mtftpd 0.0.3 - Remote Code Execution2005-03-29 · remote · linux · Verified
Impact
Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yepyep | Mtftpd | Versions 0.1a, 0.2, 0.3 |
References
- NVD record
- CVE.org record
- http://unl0ck.org/files/papers/mtftpd.txt
- http://www.securiteam.com/exploits/5KP0W0AF5K.html
- http://www.securityfocus.com/bid/12947
- http://www.tripbit.org/advisories/TA-040305.txt
- http://unl0ck.org/files/papers/mtftpd.txt
- http://www.securiteam.com/exploits/5KP0W0AF5K.html
- http://www.securityfocus.com/bid/12947
- http://www.tripbit.org/advisories/TA-040305.txt