cbcvebase.
CVE-2000-0876
published 2000-11-14

CVE-2000-0876: WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that…

PriorityP410medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.52%
71.5th percentile
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname.

Affected

6 ranges
VendorProductVersion rangeFixed in
texas_imperial_softwarewftpd
texas_imperial_softwarewftpd
texas_imperial_softwarewftpd
texas_imperial_softwarewftpd
texas_imperial_softwarewftpd
texas_imperial_softwarewftpd_pro
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.