Vulnerability Details : CVE-2004-0432
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
Products affected by CVE-2004-0432
- cpe:2.3:a:proftpd_project:proftpd:1.2.9:*:*:*:*:*:*:*
- cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
- cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-0432
0.40%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 70 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-0432
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2004-0432
-
http://marc.info/?l=bugtraq&m=108335030208523&w=2
'TSLSA-2004-0025 - multi' - MARC
-
http://www.securityfocus.com/bid/10252
Patch;Vendor Advisory
-
http://www.mandriva.com/security/advisories?name=MDKSA-2004:041
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/16038
-
http://marc.info/?l=bugtraq&m=108335051011341&w=2
-
http://bugs.proftpd.org/show_bug.cgi?id=2267
Jump to