Lucene search
K

7 matches found

CVE
CVE
added 2001/05/07 4:0 a.m.43 views

CVE-2000-0876

Vulnerability summary: WFTPD and WFTPD Pro 2.41 RC12 expose the server’s full pathname to remote attackers by issuing a "%C" command, which triggers an error message revealing the path. Affected products/components: WFTPD, WFTPD Pro 2.41 RC12. Root cause/technique: error-path disclosure in server...

5CVSS7AI score0.01522EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2001/05/07 4:0 a.m.44 views

CVE-2000-0875

CVE-2000-0875 affects WFTPD and WFTPD Pro 2.41 RC12. The vulnerability allows remote denial of service by sending a long string of unprintable characters. The provided documents do not specify the underlying root cause beyond this description, nor do they provide remediation steps or confirmed ex...

5CVSS7AI score0.01657EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2000/10/13 4:0 a.m.38 views

CVE-2000-0644

CVE-2000-0644 affects WFTPD and WFTPD Pro 2.41. The vulnerability enables remote denial of service by issuing a STAT command while a LIST command is still in progress. The public sources in the connected documents confirm the impact as a partial availability degradation, but the materials do not ...

5CVSS7.1AI score0.07301EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2000/08/03 4:0 a.m.50 views

CVE-2000-0648

Vulnerability : WFTPD and WFTPD Pro 2.41 suffer a denial-of-service by issuing RNTO before RNFR, causing local DoS. Affecting components : FTP server software WFTPD/WFTPD Pro 2.41; affected command sequence involves RNTO and RNFR. Root cause / impact : Misordered RNTO/RNFR handling can crash the ...

5CVSS6.4AI score0.03605EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2000/08/03 4:0 a.m.42 views

CVE-2000-0647

CVE-2000-0647 affects WFTPD and WFTPD Pro 2.41. A remote attacker can trigger a denial of service by issuing an MLST command before logging in, potentially impacting availability. No remediation details are provided in the supplied documents.

5CVSS6.8AI score0.05268EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2000/08/03 4:0 a.m.40 views

CVE-2000-0646

WFTPD and WFTPD Pro 2.41 are vulnerable to information disclosure: a remote attacker can obtain the real file pathname by issuing a STATUS (STAT) command during a transfer, exposing filesystem paths. The provided documents do not specify an official fix or remediation, nor exploitation status bey...

5CVSS7.2AI score0.02205EPSS
Exploits1References2Affected Software1
Packet Storm
Packet Storm
added 2000/07/11 12:0 a.m.32 views

wftpd241.txt

================================================================ BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC10 11/07/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ Problem: An out of sequence RNTO...

7.4AI score
Exploits0
Rows per page
Query Builder