Unscored CVE-2003-1206 EUVD-2003-1196GHSA-fqfj-7h7r-fmwr

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequenc…

Published May 19, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the username during login, or other FTP commands such as (2) dir.

References

http://www.crob.net/studio/ftpserver/
20030806 DoS Vulnerabilities in Crob FTP Server 2.60.1 mailing-list
8929 third-party-advisory
20030807 Re: DoS Vulnerabilities in Crob FTP Server 2.60.1 mailing-list
crob-login-dos(12834) vdb-entry