CVE-2004-0185
published 2004-03-15CVE-2004-0185: Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly…
PriorityP433critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.45%
93.7th percentile
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| washington_university | wu-ftpd | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c878-8cvq-qfv7: Buffer overflow in the skey_challenge function in ftpd
ghsa_unreviewed·2022-05-03
CVE-2004-0185 [HIGH] GHSA-c878-8cvq-qfv7: Buffer overflow in the skey_challenge function in ftpd
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.
Red Hat
security flaw
vendor_redhat·2004-03-08·CVSS 10.0
CVE-2004-0185 [CRITICAL] security flaw
security flaw
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.
No detection rules found.
ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patchhttp://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txthttp://www.debian.org/security/2004/dsa-457http://www.redhat.com/support/errata/RHSA-2004-096.htmlhttp://www.securiteam.com/unixfocus/6X00Q1P8KC.htmlhttp://www.securityfocus.com/bid/8893https://exchange.xforce.ibmcloud.com/vulnerabilities/13518ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patchhttp://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txthttp://www.debian.org/security/2004/dsa-457http://www.redhat.com/support/errata/RHSA-2004-096.htmlhttp://www.securiteam.com/unixfocus/6X00Q1P8KC.htmlhttp://www.securityfocus.com/bid/8893https://exchange.xforce.ibmcloud.com/vulnerabilities/13518
2004-03-15
Published