Unrated severityNVD Advisory· Published Oct 3, 2007· Updated Jun 16, 2026

CVE-2007-5184

Description

Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Smbftpd/Smbftpd2 versions
cpe:2.3:a:smbftpd:smbftpd:0.96:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:smbftpd:smbftpd:0.96:*:*:*:*:*:*:*
- (no CPE)range: =0.96

Patches

Vulnerability mechanics

References

sourceforge.net/project/shownotes.phpnvdPatch
www.securityfocus.com/bid/25871nvdExploitPatch
secunia.com/advisories/27014nvdVendor Advisory
debork.se/poc/001_smbftpd.cnvd
osvdb.org/41385nvd
www.securityfocus.com/archive/1/481220/100/0/threadednvd
www.vupen.com/english/advisories/2007/3311nvd
exchange.xforce.ibmcloud.com/vulnerabilities/36893nvd
www.exploit-db.com/exploits/4478nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.010
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000