Description
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by mandragore · cremotewindows
https://www.exploit-db.com/exploits/23531
Scores
EPSS
0.0830
EPSS Percentile
92.3%
Details
Status
published
Products (1)
hd_soft/windows_ftp_server
< 1.6
Published
Feb 17, 2004
Tracked Since
Feb 18, 2026