high7.5Public exploit code
CVE-2007-0338
Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specif…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BolinTech DreamFTP Server - 'USER' Remote Buffer Overflow (PoC)2007-01-14 · dos · windows · Verified
Impact
Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers, which triggers the overflow during processing of the Server Log.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bolintech | Dreamftp Server | All versions |