CVE-2004-0342

CVE-2004-0342 affects WFTPD Pro Server 3.21 Release 1 when XeroxDocutech is enabled. A denial-of-service (crash) can be triggered by local users issuing MKD or XMKD commands that build an absolute path of 260 characters, which overwrites a cookie with a null character—likely due to an off-by-one ...