CVE-2004-1327
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary...
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.
- Record
CVE-2004-1327- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.
- Record
CVE-2004-1327- Updated
- 2026-11-02
EUVDEUVD-2004-1324 No score
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.
- Record
EUVD-2004-1324- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x7w7-f2hw-89jv No score
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary...
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.
- Record
GHSA-x7w7-f2hw-89jv- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | CrystalFTP Pro 2.8 - Remote Buffer Overflow | 2005-04-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1327 is a high vulnerability (CVSS 7.5) in Crystal Art Software Ftp, published December 31, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.76%, the 91st percentile. No source names a fixed version.