Unscored severity · published Oct 20, 2004
CVE-2004-0794
Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code
–
CVSS
2.4%
EPSS
No
On KEV
Description
Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LU
Lukemftp · Luke Mewburn
1.1; 1.5 · source: NVD
TN
Tnftpd · Luke Mewburn
2003-12-17 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0794
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0794
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025418.html
www.debian.org
http://www.debian.org/security/2004/dsa-551
Vendor Advisory
http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8-9837-000c41e2cdad.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17020
More from Lukemftp
–
CVE-2002-0768
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV…
–
CVE-2002-0600
Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request