{"id":"CVE-2004-0340","aliases":["EUVD-2004-0340","GHSA-5ff7-p7hw-6x23"],"status":"published","title":"Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server...","description":"Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01295,"percentile":0.70525,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-03-18T05:00:00Z","modified":"2026-06-16T22:05:25Z","exploits":[{"source":"exploitdb","id":"EDB-159","title":"WFTPD Server 3.21 - Remote Buffer Overflow","type":"remote","platform":"windows","date":"2004-02-29","verified":true,"url":"https://www.exploit-db.com/exploits/159"}],"products":[{"vendor":"texas_imperial_software","product":"wftpd"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15340","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/11001","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=107801208004699\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/9767","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0340"},{"url":"https://github.com/advisories/GHSA-5ff7-p7hw-6x23"}],"sources":{"cve":[{"id":"CVE-2004-0340","description":"Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.","status":"published","published":"2004-03-18T05:00:00Z","modified":"2024-08-08T00:17:14.233Z","updated_at":"2026-11-02T14:34:54.758165Z"}],"euvd":[{"id":"EUVD-2004-0340","description":"Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.","status":"published","published":"2004-03-18T05:00:00Z","modified":"2024-08-08T00:17:14Z","updated_at":"2026-11-03T01:15:19.621932Z"}],"ghsa":[{"id":"GHSA-5ff7-p7hw-6x23","title":"Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server...","description":"Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.","status":"published","published":"2022-04-29T02:57:34Z","modified":"2023-01-30T05:02:42Z","updated_at":"2026-11-02T14:46:42.161058Z"}],"nvd":[{"id":"CVE-2004-0340","description":"Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.","status":"published","published":"2004-11-23T05:00:00Z","modified":"2026-06-16T22:05:25.37Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.985436Z"}]}}