CVE-2004-0340 Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NL...
HighCVSS 7.2
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| texas imperial software wftpd | = 3.0 | No fix listed |
| texas imperial software wftpd | = 3.0_0r3 | No fix listed |
| texas imperial software wftpd | = 3.0_0r4 | No fix listed |
| texas imperial software wftpd | = 3.0_0r5 | No fix listed |
| texas imperial software wftpd | = 3.10_r1 | No fix listed |
| texas imperial software wftpd | = 3.20 | No fix listed |
| texas imperial software wftpd | = 3.21 | No fix listed |
| texas imperial software wftpd | = pro_3.10_r1 | No fix listed |
| texas imperial software wftpd | = pro_3.20 | No fix listed |
| texas imperial software wftpd | = pro_3.21 | No fix listed |
References
- 20040228 Critical WFTPD buffer overflow vulnerability mailing-list
- 11001 third-party-advisory
- 9767 exploit patch vdb-entry vendor-advisory
- wftpd-ftp-commands-bo(15340) vdb-entry