vendor:
mtftpd
by:
gunzip
7.5
CVSS
HIGH
Format String Vulnerability
134
CWE
Product Name: mtftpd
Affected Version From: 0.0.3
Affected Version To: 0.0.3
Patch Exists: YES
Related CWE: N/A
CPE: mtftpd
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2002
mtftpd Remote Format String Vulnerability
mtftpd is reported prone to a remote format string vulnerability. Reports indicate that this issue may be exploited by a remote authenticated attacker to execute arbitrary code in the context of the vulnerable service. This vulnerability is reported to affect mtftpd versions up to an including version 0.0.3.
Mitigation:
Upgrade to the latest version of mtftpd and apply the patch provided in the exploit code.
