CVE-2004-2074: Bolintech Dream FTP Server

Medium severity, CVSS 5.0. EPSS: 35.8% chance of exploitation in the next 30 days.

Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.

Affected products

• Bolintech Dream FTP Server: version 1.02 only

Published 2004-12-31. Last modified 2026-06-16.