CVE-2005-1371

high

Description

BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20301

http://www.vupen.com/english/advisories/2005/0419

http://www.osvdb.org/15898

http://secunia.com/advisories/15152

http://marc.info/?l=bugtraq&m=111464474828477&w=2

Details

Source: Mitre, NVD

Published: 2005-05-03

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H