CVE-2000-0646

WFTPD and WFTPD Pro 2.41 are vulnerable to information disclosure: a remote attacker can obtain the real file pathname by issuing a STATUS (STAT) command during a transfer, exposing filesystem paths. The provided documents do not specify an official fix or remediation, nor exploitation status bey...

CVE-2000-0645

CVE-2000-0645 affects WFTPD and WFTPD Pro 2.41. The vulnerability allows remote attackers to cause a denial of service by issuing RESTART (REST) and writing beyond the end of a file or to a non-existent file via STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE). The issue is triggered by crafti...

CVE-2000-0648

Vulnerability : WFTPD and WFTPD Pro 2.41 suffer a denial-of-service by issuing RNTO before RNFR, causing local DoS. Affecting components : FTP server software WFTPD/WFTPD Pro 2.41; affected command sequence involves RNTO and RNFR. Root cause / impact : Misordered RNTO/RNFR handling can crash the ...

wftpd241.txt

================================================================ BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC10 11/07/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ Problem: An out of sequence RNTO...

WFTPD/WFTPD Pro 2.41 RC10 denial-of-service

================================================================ BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC10 11/07/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ Problem: An out of sequence RNTO...