CVE-2003-1206: Crob FTP Server

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the username during login, or other FTP commands such as (2) dir.

Affected products

• Crob Crob FTP Server: version 2.60.1 only

Published 2003-06-03. Last modified 2026-06-16.