medium5.0
CVE-2000-0646
WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferre…
Impact
WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Texas Imperial Software | Wftpd | Versions 2.4.1, 2.4.1_rc11, 2.34, 2.40 |