Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format strings in the USER command.
| Software | From | Fixed in |
|---|---|---|
| pablo_software_solutions / pablo_ftp_server | 1.0 | 1.0.x |
| pablo_software_solutions / pablo_ftp_server | 1.5 | 1.5.x |
| pablo_software_solutions / pablo_ftp_server | 1.2 | 1.2.x |
| pablo_software_solutions / pablo_ftp_server | 1.3 | 1.3.x |