CVE-2004-1118

CRITICAL 10.0CVE-2004-1118 · Published 10/01/2005 · updated 16/06/2026

In short

CVE-2004-1118 is a CRITICAL (CVSS 10.0) vulnerability affecting wodftpdlx activex component (weonlydo).
Chance of exploitation in the next 30 days (EPSS): 8.2%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wodftpdlx activex component weonlydo	`= 2.1.1_8`	No fix yet

Description

Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.

References

lists.grok.org.uk/pipermail/full-disclosure/2004-November/029243.html
lists.grok.org.uk/pipermail/full-disclosure/2004-November/029244.html
marc.info
securityfocus.com/bid/11721 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/18190

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free