CVE-2003-1158: Plug And Play Software Plug And Play Web Server

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a denial of service (crash) via long (1) dir, (2) ls, (3) delete, (4) mkdir, (5) DELE, (6) RMD, or (7) MKD commands.

Affected products

• Plug And Play Software Plug And Play Web Server: version 1.0.002c only

Published 2003-12-31. Last modified 2026-06-16.