CVE-2008-5666

CVE-2008-5666 affects WinFTP Server 2.3.0. In PASV mode, a sequence of FTP sessions with an invalid NLST -1 can trigger a denial of service. Public sources (e.g., PacketStorm Metasploit PoC, OpenVAS entries) corroborate a PASV/NLST DoS vector but do not provide vendor-issued fixes within the supp...

CVE-2009-0351

WinFTP Server (version 2.3.0) is affected by a stack-based buffer overflow in WFTPSRV.exe. The vulnerability occurs when handling a LIST command, where a long LIST argument beginning with an asterisk can allow remote authenticated users to execute arbitrary code within the process’s privileges. P...