NetSight
low2.1

CVE-2004-0341

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU c…

Impact

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline.

Affected products

VendorProductAffected versions
Texas Imperial SoftwareWftpd
Versions 3.0, 3.0_0r3, 3.0_0r4, 3.0_0r5, 3.10_r1, 3.20

References