CVE-2005-1666

CVE-2005-1666 describes multiple buffer overflow vulnerabilities in Orenosv HTTP/FTP Server version 0.8.1. These flaws allow remote authenticated users to trigger a denial of service and potentially execute arbitrary code through excessively long arguments to FTP commands (MKD, RMD, DELE) or a long SSI command processed by cgissi.exe. The vulnerability has a CVSS score of 7.5, indicating high severity with a network attack vector and low attack complexity, leading to potential partial impacts on confidentiality, integrity, and availability. Its FAUCET Risk Score is 96/100, suggesting significant risk. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, demonstrating proof-of-concept for both FTP command and CGISSI.exe buffer overflows. There is no evidence of active exploitation, and community discussion or media coverage for this CVE is minimal.