CVE-2004-0794: Race Condition
Published Aug 19, 2004
·Updated
Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code.
Affected Software
3 affected components
Luke Mewburn Lukemftp=1.1
Luke Mewburn Lukemftp=1.5
Luke Mewburn Tnftpd=2003-12-17
Remediation
Event History
Aug 19, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0794?
CVE-2004-0794 has a severity rating of high due to its potential to allow remote code execution and denial of service.
2
How do I fix CVE-2004-0794?
To fix CVE-2004-0794, you need to update to the latest version of lukemftpd or tnftpd where the vulnerability has been patched.
3
What software is affected by CVE-2004-0794?
CVE-2004-0794 affects lukemftpd version 1.5, tnftpd version 2003-12-17, and lukemftpd version 1.1.
4
Can CVE-2004-0794 be exploited remotely?
Yes, CVE-2004-0794 can be exploited by remote authenticated attackers to execute arbitrary code.
5
What types of vulnerabilities does CVE-2004-0794 include?
CVE-2004-0794 includes multiple race conditions in signal handlers leading to denial of service or remote code execution.