CVE-2004-0185

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txtURL Repurposed
http://www.debian.org/security/2004/dsa-457Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-096.htmlPatch, Vendor Advisory
http://www.securiteam.com/unixfocus/6X00Q1P8KC.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/8893
https://exchange.xforce.ibmcloud.com/vulnerabilities/13518
http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txtURL Repurposed
http://www.debian.org/security/2004/dsa-457Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-096.htmlPatch, Vendor Advisory
http://www.securiteam.com/unixfocus/6X00Q1P8KC.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/8893
https://exchange.xforce.ibmcloud.com/vulnerabilities/13518

Timeline

Published: Mar 15, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-01867.2smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that c CVE-2004-01887.2Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.CVE-2004-01897.5The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00 CVE-2004-01907.5Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the admi CVE-2004-01916.8Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the prev CVE-2004-01926.8Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookie CVE-2004-01937.5Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Senso CVE-2004-01947.5Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code CVE-2004-01977.5Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database quer CVE-2004-01995.1Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attacke CVE-2004-02009.3Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote CVE-2004-020110.0Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 all