CVE-2007-5184: Smbftpd

High severity, CVSS 7.5. EPSS: 12.5% chance of exploitation in the next 30 days.

Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name.

Affected products

• Smbftpd Smbftpd: version 0.96 only

Published 2007-10-03. Last modified 2026-06-16.