BolinTech Dream FTP Server 1.02 allows remote authenticated users, including anonymous users, to cause a denial of service (application crash) via a certain invalid PORT command.
Export limit exceeded: 11764 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2006-6724
CVSS 2.0 · 4.0 Medium
EPSS 2.5%
KEV · Not listed
Vendors
Products
CVE-2007-0338
Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers, which triggers the overflow during processing of the Server Log.
CVSS 2.0 · 7.5 High
EPSS 4.9%
KEV · Not listed
Vendors
Products
CVE-2004-0277
Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.
CVSS 2.0 · 10.0 Critical
EPSS 13.6%
KEV · Not listed
Vendors
Products
CVE-2004-2074
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.
CVSS 2.0 · 5.0 Medium
EPSS 35.8%
KEV · Not listed
Vendors
Products
Page 1 of 1.