Back
CVE-2004-0069
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.
Published: Feb 17, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| hd_soft | windows_ftp_server | * |
GitHub Security Advisory GHSA-g3fr-x7rp-h3r6
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers...
References (8)
- http://marc.info/?l=bugtraq&m=107367110805273&w=2
- http://marc.info/?l=bugtraq&m=107401398014761&w=2
- http://www.securityfocus.com/bid/9385 Exploit, Vendor Advisory
- http://www.securitytracker.com/id?1008658
- http://marc.info/?l=bugtraq&m=107367110805273&w=2
- http://marc.info/?l=bugtraq&m=107401398014761&w=2
- http://www.securityfocus.com/bid/9385 Exploit, Vendor Advisory
- http://www.securitytracker.com/id?1008658
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
9.77%
Top 5% most likely to be exploited
Threat Score
32.9 / 100
Data Sources
NVD
EPSS
GitHub