CVE-2004-2523

CVE-2004-2523

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.4%
from disclosure to weaponsame day
Published on NVDOct 25
1st PoCAug 3
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.