acftp records
3 published records for vendor acftp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2002-2417Proof of concept | acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to acftp · acftp · CWE-287 | Critical10.0 | — | 4.1% | Dec 31, 2002 |
21Monitor | CVE-2006-2242Proof of concept | acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) characters to the USERacftp · acftp | Medium5.0 | — | 3.7% | May 9, 2006 |
15Monitor | CVE-2006-6775Proof of concept | acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command.acftp · acftp | Low3.5 | — | 1.9% | Dec 27, 2006 |
- CVE-2002-241741Plan
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to
CriticalCVSS 10.0Proof of conceptEPSS 4%acftp · acftpDec 31, 2002
- CVE-2006-224221Monitor
acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) characters to the USER
MediumCVSS 5.0Proof of conceptEPSS 3%acftp · acftpMay 9, 2006
- CVE-2006-677515Monitor
acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command.
LowCVSS 3.5Proof of conceptEPSS 1%acftp · acftpDec 27, 2006