Stack overflow

Off-by-one error in the dologinloop function in libwzd-core/wzdlogin.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attackers to cause a denial of service daemon crash via a long USER command that triggers a stack-based buffer overflow. NOTE: some of these details are obtain...

CVE-2007-5300

The CVE-2007-5300 issue affects wzdftpd (notably 0.8.0 and 0.8.2) and is caused by an off-by-one error in wzd_login.c that enables a stack-based buffer overflow when handling a long USER command, leading to a remote denial of service (daemon crash). Public advisory data confirm the vulnerability ...