CVE-2006-4318

CVE-2006-4318 is a buffer overflow in Texas Imperial Software’s WFTPD 3.23 server triggered by oversized SIZE commands. The vulnerability allows remote attackers to execute arbitrary code. Public data confirms exploit tooling exists: Metasploit and Exploit-DB modules demonstrate the SIZE overflow...

CVE-1999-0950

CVE-1999-0950 describes a buffer overflow in the WFTPD FTP server triggered by a sequence of MKD and CWD commands that create nested directories. The underlying vulnerability allows a remote attacker to gain root privileges on affected systems. The issue is a classic WU-FTPD-related overflow scen...

CVE-2007-0311

CVE-2007-0311 affects Texas Imperial Software WFTPD and WFTPD Pro Server versions 3.25 and earlier. The flaw allows remote attackers to trigger a denial of service by sending a long SITE ADMIN command, causing an application crash. The CVSS metrics in the initial entry indicate a Network vector, ...

CVE-2001-0694

CVE-2001-0694 affects WFTPD 3.00 R5 with a directory traversal vulnerability exposed via a dot-dot sequence in the CD command. The vulnerability allows a remote attacker to view arbitrary files, impacting confidentiality and integrity (CVSS v2 base score 7.5, HIGH; network attack, low complexity,...

CVE-2006-5826

The CVE-2006-5826 issue affects WFTPD Pro Server 3.23.1.1 (Texas Imperial Software). A stack/buffer overflow in the APPE command, triggered by crafted APPE inputs containing a "/" or "\", allows remote authenticated users to crash or potentially execute code on the server. Nessus notes this as a ...

CVE-2001-0695

CVE-2001-0695 : WFTPD 3.00 R5 is vulnerable to a remote denial-of-service caused by repeated requests to change directory to the floppy drive (A:). The description indicates a network-accessible condition with low attack complexity and no authentication required, leading to partial availability i...

CVE-2000-0645

CVE-2000-0645 affects WFTPD and WFTPD Pro 2.41. The vulnerability allows remote attackers to cause a denial of service by issuing RESTART (REST) and writing beyond the end of a file or to a non-existent file via STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE). The issue is triggered by crafti...

CVE-2000-0648

Vulnerability : WFTPD and WFTPD Pro 2.41 suffer a denial-of-service by issuing RNTO before RNFR, causing local DoS. Affecting components : FTP server software WFTPD/WFTPD Pro 2.41; affected command sequence involves RNTO and RNFR. Root cause / impact : Misordered RNTO/RNFR handling can crash the ...

CVE-2004-0340

CVE-2004-0340 corresponds to a stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10. The vulnerability allows local users to execute arbitrary code by sending abnormally long commands in LIST, NLST, or STAT. This is a lo...

CVE-2004-0341

CVE-2004-0341 affects WFTPD Pro Server 3.21 Release 1 . The flaw arises because the server allocates memory for a command until a 0x0A (newline) is received, enabling a local attacker to cause a denial of service (CPU consumption) by sending a long command that never contains a newline. The NVD e...

CVE-2000-0875

CVE-2000-0875 affects WFTPD and WFTPD Pro 2.41 RC12. The vulnerability allows remote denial of service by sending a long string of unprintable characters. The provided documents do not specify the underlying root cause beyond this description, nor do they provide remediation steps or confirmed ex...

CVE-2000-0876

Vulnerability summary: WFTPD and WFTPD Pro 2.41 RC12 expose the server’s full pathname to remote attackers by issuing a "%C" command, which triggers an error message revealing the path. Affected products/components: WFTPD, WFTPD Pro 2.41 RC12. Root cause/technique: error-path disclosure in server...

CVE-2000-1101

The CVE-2000-1101 entry describes a directory traversal vulnerability in Winsock FTPd (WFTPD) versions 3.00 and 2.41 when the “Restrict to home directory” option is enabled. The flaw allows local users to escape the home directory by crafting a "/../" sequence, a variant of the dot-dot attack. Th...

CVE-2000-0647

CVE-2000-0647 affects WFTPD and WFTPD Pro 2.41. A remote attacker can trigger a denial of service by issuing an MLST command before logging in, potentially impacting availability. No remediation details are provided in the supplied documents.

CVE-2000-0646

WFTPD and WFTPD Pro 2.41 are vulnerable to information disclosure: a remote attacker can obtain the real file pathname by issuing a STATUS (STAT) command during a transfer, exposing filesystem paths. The provided documents do not specify an official fix or remediation, nor exploitation status bey...

CVE-2000-0644

CVE-2000-0644 affects WFTPD and WFTPD Pro 2.41. The vulnerability enables remote denial of service by issuing a STAT command while a LIST command is still in progress. The public sources in the connected documents confirm the impact as a partial availability degradation, but the materials do not ...

CVE-2004-1642

CVE-2004-1642 affects WFTPD Pro Server 3.21. A remote authenticated user can trigger a denial of service (crash) by sending a sequence of long MLIST commands. The provided documents confirm the affected product/version and the impact (DoS) but do not disclose the underlying root cause details or ...