CVE-2004-0185: Buffer Overflow
First published: Mon Mar 15 2004(Updated: )
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| wu-ftpd | =2.6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securiteam.com/unixfocus/6X00Q1P8KC.html
- http://www.debian.org/security/2004/dsa-457
- http://www.redhat.com/support/errata/RHSA-2004-096.html
- http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txt
- http://www.securityfocus.com/bid/8893
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13518
Frequently Asked Questions
What is the severity of CVE-2004-0185?
CVE-2004-0185 has a high severity due to its potential to allow remote attackers to execute arbitrary code and cause denial of service.
How do I fix CVE-2004-0185?
To fix CVE-2004-0185, upgrade to a patched version of wu-ftpd or disable the affected service.
Which versions are affected by CVE-2004-0185?
CVE-2004-0185 affects wu-ftpd version 2.6.2.
What type of attack does CVE-2004-0185 enable?
CVE-2004-0185 enables a buffer overflow attack through a long s/key request, which can lead to remote code execution.
Can CVE-2004-0185 result in denial of service?
Yes, CVE-2004-0185 can cause a denial of service condition due to the buffer overflow vulnerability.
- agent/references
- agent/type
- agent/remedy
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-index
- vendor/washington university
- canonical/wu-ftpd
- version/wu-ftpd/2.6.2