ID CVE-2004-1118
Summary Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.
References
Vulnerable Configurations
  • cpe:2.3:a:weonlydo:wodftpdlx_activex_component:*:*:*:*:*:*:*:*
    cpe:2.3:a:weonlydo:wodftpdlx_activex_component:*:*:*:*:*:*:*:*
  • cpe:2.3:a:weonlydo:wodftpdlx_activex_component:2.1.1_8:*:*:*:*:*:*:*
    cpe:2.3:a:weonlydo:wodftpdlx_activex_component:2.1.1_8:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 11-07-2017 - 01:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 11721
bugtraq 20041122 WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability
fulldisc
  • 20041122 CoffeeCup FTP Clients Buffer Overflow Vulnerability
  • 20041122 WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability
xf wodftpdlx-long-filename-bo(18190)
Last major update 11-07-2017 - 01:30
Published 10-01-2005 - 05:00
Last modified 11-07-2017 - 01:30
Back to Top