VULNERABILITY INTELLIGENCE
CVE-2005-3467
CVSS score5 MEDIUM
EPSS probability2.41%
CISA KEVNot currently listed
Published2005-11-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service (crash) via (1) malformed packets and possibly other unspecified issues with unknown impact and attack vectors including (2) use of "~" in a pathname, and (3) memory consumption of the daemon. NOTE: it is not clear whether items (2) and above are vulnerabilities.
Weakness classification
- CWE-20: Improper Input Validation