CVE-2000-0644 WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing.
MediumCVSS 5.0
EPSS 7.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| texas imperial software wftpd | = 2.4.1 | No fix listed |
| texas imperial software wftpd | = 2.4.1_rc11 | No fix listed |
| texas imperial software wftpd | = 2.34 | No fix listed |
| texas imperial software wftpd | = 2.40 | No fix listed |
References
- 20000721 WFTPD/WFTPD Pro 2.41 RC11 vulnerabilities. mailing-list patch vendor-advisory
- 1477 vdb-entry
- 1506 exploit patch vdb-entry vendor-advisory
- wftpd-stat-dos(5003) vdb-entry