CVE-2005-1815: Hummingbird Connectivity inetD FTPD and LPD buffer overflows

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

medium priorityThe CVSS base score is 5.0 (MEDIUM) with network reachability and no authentication, but the record lacks confirmed exploit code and the product is legacy.

What it is

Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 contain multiple buffer overflows in the FTP daemon (ftpdw.exe) and line printer daemon (Lpdw.exe). A long FTP command argument or a large amount of data sent to LPD can crash the service and may allow arbitrary code execution. The flaw matters because these are network-facing services that can be reached without authentication.

Impact

An unauthenticated attacker can cause a denial of service and possibly execute arbitrary code on the affected host. Successful code execution would give the attacker the privileges of the vulnerable service.

Attack surface

The flaw is reached over the network via FTP commands to ftpdw.exe or data sent to Lpdw.exe. The CVSS vector AV:N/AC:L/Au:N indicates no authentication and no user interaction are required.

Exploitation

CVE-2005-1815 is not listed in CISA KEV and no ransomware usage is documented. EPSS shows a 30-day probability of 0.47192 (98.8th percentile), and all references are vendor advisories and patch links, so no public exploit code is confirmed by this record.

What to do

• Apply the vendor patches referenced in the Hummingbird advisories for FTPD and LPD.
• If patching is not possible, disable or block network access to ftpdw.exe and Lpdw.exe.
• Restrict FTP and LPD access to trusted hosts using firewall rules or access controls.
• Monitor vendor support channels for updated advisories because the product is legacy.

Detection

• Monitor FTP and LPD service logs for crashes, restarts, or abnormal termination.
• Inspect network traffic for unusually long FTP command arguments or oversized LPD data.
• Alert on repeated connection attempts to FTP or LPD from untrusted sources.
• Check host logs for unexpected process creation or code execution following FTP or LPD activity.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.