CVE-2004-2728: Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated user...

Security readout for executives and security teams

CVE-2004-2728 affects the FTP server in Hummingbird Connectivity 7.1 and 9.0. A logged-in remote user can send an overly long XCWD command argument and crash the FTP application. The confirmed impact in the source bundle is denial of service, not data theft or privilege escalation. Exposure is likely limited to organizations still running Hummingbird Connectivity 7.1 or 9.0 with its FTP server enabled and reachable by authenticated users. Internet-facing FTP, partner access, or shared accounts would raise operational risk. Prioritize if this FTP service is exposed beyond a small trusted user base or supports business-critical file transfer. For isolated or retired systems, handle through legacy software cleanup and access reduction. Mitigation focus: Check vendor or referenced advisory guidance for a supported fix or workaround.; Identify and retire Hummingbird Connectivity 7.1 or 9.0 FTP services where possible.; Restrict FTP access to trusted networks and required authenticated users only..

Prepared

Jun 29, 2026, 02:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.