CVE:CVE-2005-0958
CNNVD:CNNVD-200505-388
YepYep mtftpd 0.0.3的log.c中的log_do函数存在格式化字符串漏洞，在启用statistics选项的情况下，允许远程攻击者通过CWD命令执行任意代码。
solution:Upgrade yepyep mtftpd to a higher version than 0.1a,0.2,0.3,and avoid the version 0.1a,0.2,0.3