10
CVE-2004-1636
- EPSS 8.3%
- Veröffentlicht 26.10.2004 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:08:05
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginHeap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Net Integration Technologies Inc. ≫ Wvtftp Version0.9
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 8.3% | 0.942 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://marc.info/?l=bugtraq&m=109885074513940&w=2
http://secunia.com/advisories/12986
http://www.securityfocus.com/bid/11525
https://exchange.xforce.ibmcloud.com/vulnerabilities/17869