PT-2000-1579 · Texas Imperial · Wftpd Pro+1

Published 2000-07-21 · Updated 2008-09-10 · CVE-2000-0645

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions WFTPD and WFTPD Pro version 2.41

Description The issue allows remote attackers to cause a denial of service. This can be achieved by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist. Attackers can exploit this via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE).

Recommendations For WFTPD and WFTPD Pro version 2.41, consider restricting access to the RESTART (REST) command and the STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE) commands as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2000-0645

Affected Products

Wftpd

Wftpd Pro

References · 4

• 🔥 https://exploit-db.com/exploits/20101 · Exploit
• 🔥 http://securityfocus.com/bid/1506 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0645 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html · Vendor Advisory