Back

CVE-2004-0069

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.

Published: Feb 17, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
hd_soft windows_ftp_server *

GitHub Security Advisory GHSA-g3fr-x7rp-h3r6

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 9.77%

Top 5% most likely to be exploited

Threat Score 32.9 / 100

Data Sources

NVD EPSS GitHub