VULNERABILITY INTELLIGENCE

CVE-2008-3734

CVSS score9.3 HIGH
EPSS probability13.95%
CISA KEVNot currently listed
Published2008-08-20
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in a connection greeting (response).

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references