8 matches found
CVE-1999-0256
CVE-1999-0256 describes a stack-based buffer overflow in War FTP Daemon (War-FTPD) 1.65 (and potentially earlier) that affects the PASS command, allowing remote code execution or denial of service. Public materials in connected sources show confirmatory details: exploits/modules (e.g., Metasploit...
CVE-2006-2171
CVE-2006-2171 describes a buffer overflow in WarFTP Daemon’s WDM.exe, allowing remote attackers to execute arbitrary code via unspecified arguments (demonstrated by the Infigo FTPStress Fuzzer). The vulnerability is characterized in the NVD entry as a network-facing issue with a medium base score...
CVE-2000-0131
CVE-2000-0131: War FTP Daemon 1.6x is vulnerable to a buffer overflow in the CWD/MKD command handling due to improper bounds checking. This can enable a remote attacker to crash the server (DoS) via long MKD/CWD commands. Documented in several sources (OpenVAS/Nessus entries), with CVSSv2 base sc...
CVE-1999-1003
CVE-1999-1003 affects War FTP Daemon 1.70. The vulnerability allows remote attackers to cause a denial of service by flooding the server with connections. The connected PT-1999-1521 entry provides concrete remediation guidance: for War FTP Daemon 1.70, consider restricting the number of concurren...
CVE-2000-0044
The CVE-2000-0044 entry concerns War FTP Daemon versions 1.70 and 1.67b2, where macros allow local or remote attackers to read arbitrary files or execute commands. The connected records confirm the affected product/version and the underlying impact, but they do not provide a concrete remediation ...
CVE-2006-5789
WarFTPd 1.82.00-RC11 is affected by multiple remote format-string vulnerabilities. The OpenVAS notes indicate the server is prone to format-string issues caused by unsanitized input being passed to formatted-output functions, enabling a denial of service (and potentially arbitrary code execution)...
CVE-2013-2278
CVE-2013-2278 affects War FTP Daemon (warftpd) 1.82 when run as a Windows service. The vulnerability allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to log messages and the internal log handler to the Windows Event log. ...
CVE-2009-5141
War FTP Daemon (warftpd) 1.82 RC 12 has a format string vulnerability in the LIST command that lets remote authenticated users crash the service (denial of service). Root cause is improper handling of format specifiers in the LIST response. The issue is documented across Red Hat, NVD/NIST, and CV...