What’s Vulnerable › Vulnerabilities

CVE-2004-0277

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-11-23 · updated 2026-06-16

Description

Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.

Affected products

• Bolintech Dream Ftp Server: 1.02

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016871.html
• http://marc.info/?l=bugtraq&m=107656166402882&w=2
• http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722
• http://www.securityfocus.com/bid/9600
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15070
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016871.html
• http://marc.info/?l=bugtraq&m=107656166402882&w=2
• http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722
• http://www.securityfocus.com/bid/9600
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15070

Get alerted when CVE-2004-0277 or the next vulnerability affects your stack