CVE-2004-0794

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-10-20 · updated 2026-06-16

Description

Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code.

Affected products

Luke Mewburn Lukemftp: 1.1, 1.5
Luke Mewburn Tnftpd: 2003-12-17

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025418.html
http://www.debian.org/security/2004/dsa-551
http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8-9837-000c41e2cdad.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/17020
http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025418.html
http://www.debian.org/security/2004/dsa-551
http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8-9837-000c41e2cdad.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/17020

Get alerted when CVE-2004-0794 or the next vulnerability affects your stack