medium5.0Public exploit code
CVE-2000-0644
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WFTPD 2.4.1RC11 - 'STAT'/'LIST' Denial of Service2000-07-21 · dos · windows · Verified
Impact
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Texas Imperial Software | Wftpd | Versions 2.4.1, 2.4.1_rc11, 2.34, 2.40 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
- http://www.osvdb.org/1477
- http://www.securityfocus.com/bid/1506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5003
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
- http://www.osvdb.org/1477
- http://www.securityfocus.com/bid/1506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5003