← back
CVE-2004-2418

CVE-2004-2418

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.4%
from disclosure to weapon0 days
Published on NVDAug 18
1st PoCNov 10
exploitation probability
1.4%top 30% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1) CWD, (2) STOR, (3) MKD, and (4) STAT.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/623
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0293.htmlhttp://secunia.com/advisories/13161http://securitytracker.com/id?1012167https://exchange.xforce.ibmcloud.com/vulnerabilities/18014http://www.osvdb.org/11604http://www.securityfocus.com/bid/11645http://www.whitsoftdev.com/slimftpd/