Every CVE Search/ Get API key

CVE-2004-1682

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group...

10.0 High

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.

Exploit likelihood

2.47%Up 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.

Record
CVE-2004-1682
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.

Record
CVE-2004-1682
Updated
2026-11-02
EUVDEUVD-2004-1676 No score

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.

Record
EUVD-2004-1676
Updated
2026-11-03
GitHub AdvisoriesGHSA-rwcj-93v2-99j2 No score

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group...

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.

Record
GHSA-rwcj-93v2-99j2
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-1682 is a high vulnerability (CVSS 10.0) in Qnx Rtp, published August 15, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.47%, the 84th percentile. No source names a fixed version.

References

MoveEnter Open