CVE-2008-3734

no score yetEPSS 14%

Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in a connection greeting (response).

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-134
Published: 2008-08-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ipswitch:ws_ftp_home
ipswitch:ws_ftp_pro

References

http://secunia.com/advisories/31504
http://securityreason.com/securityalert/4173
http://www.securityfocus.com/bid/30720
http://www.securitytracker.com/id?1020713
http://www.securitytracker.com/id?1020714

Check your stack JSON