CVE-2005-0276: 3com 3cdaemon

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) the username, (2) cd, (3) delete, (4) rename, (5) rmdir, (6) literal, (7) stat, or (8) CWD commands.

Affected products

• 3com 3cdaemon: version 2.0 only

Published 2005-05-02. Last modified 2026-06-16.