CVE-2000-1101: Undefined Security Weakness

Directory traversal vulnerability in Winsock FTPd WFTPD 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. dot dot attack...

CVE-2001-0694

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0695

WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...

CVE-2001-0694

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0695

WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...

CVE-2001-0695

CVE-2001-0695 : WFTPD 3.00 R5 is vulnerable to a remote denial-of-service caused by repeated requests to change directory to the floppy drive (A:). The description indicates a network-accessible condition with low attack complexity and no authentication required, leading to partial availability i...

CVE-2001-0694

CVE-2001-0694 affects WFTPD 3.00 R5 with a directory traversal vulnerability exposed via a dot-dot sequence in the CD command. The vulnerability allows a remote attacker to view arbitrary files, impacting confidentiality and integrity (CVSS v2 base score 7.5, HIGH; network attack, low complexity,...

CVE-2001-0695: Undefined Security Weakness

WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive A:...

CVE-2001-0694: Undefined Security Weakness

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

WFTPD v3.00 R5 Directory Traversal

I already posted another way, but this one might work in different situations and is not limited to win9x/ME WFTPD v3.00 R5 Directory Traversal AFFECTED SYSTEMS WFTPD v3.00 R5 DESCRIPTION Let's quote the manual on how the .lnk feature is supposed to work : "File Security Note that since version...

CVE-2001-1386

WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a link file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension...

WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS

WFTPD 32-bit X86 3.00 R5 Directory Traversal / Buffer Overflow / DoS AFFECTED SYSTEMS WFTPD 32-bit X86 version 3.00 R5, probably others DESCRIPTION 1 Directory Traversal WFTPD v3.00 R5 is vulnerable to a directory traversal bug that allows remote users to browse through any directory on the...

WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS

WFTPD 32-bit X86 3.00 R5 Directory Traversal / Buffer Overflow / DoS AFFECTED SYSTEMS WFTPD 32-bit X86 version 3.00 R5 on Windows 95 / 98 / SE / ME is vulnerable to a directory traversal, all versions of windows are likely to be vulnerable to the buffer overflow / DoS DESCRIPTION 1 Directory...

CVE-2000-0875

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters...

CVE-2000-0876

Vulnerability summary: WFTPD and WFTPD Pro 2.41 RC12 expose the server’s full pathname to remote attackers by issuing a "%C" command, which triggers an error message revealing the path. Affected products/components: WFTPD, WFTPD Pro 2.41 RC12. Root cause/technique: error-path disclosure in server...

CVE-2000-0875

CVE-2000-0875 affects WFTPD and WFTPD Pro 2.41 RC12. The vulnerability allows remote denial of service by sending a long string of unprintable characters. The provided documents do not specify the underlying root cause beyond this description, nor do they provide remediation steps or confirmed ex...

CVE-2000-0876

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname...

CVE-2000-0876: Exposure of Sensitive Information to an Unauthorized Actor

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname...

CVE-2000-0875: Undefined Security Weakness

WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters...

Potential DOS Vulnerability in WFTPD

----- Begin Hush Signed Message from [email protected] ----- Potential DOS Vulnerability in WFTPD Overview WFTPD v3.00R5 is an ftp server available from http://www.wftpd.com and http://www.download.com. A potential denial-of-service vulnerability exists which allows a remote attacker to hang...