CVE-2000-0648 WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command.
MediumCVSS 5.0
EPSS 3.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| texas imperial software wftpd | = 2.4.1 | No fix listed |
References
- 1456 exploit patch vdb-entry vendor-advisory
- 20000711 WFTPD/WFTPD Pro 2.41 RC10 denial-of-service mailing-list