CVE-2005-0312
published 2005-01-27CVE-2005-0312: WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a…
PriorityP414low2.1CVSS 2.0
AVLACLAuNCNINAP
EXPLOIT
EPSS
2.73%
84.2th percentile
WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jgaa | warftpd | — | — |
| war_ftp_daemon | war_ftp_daemon | — | — |
| war_ftp_daemon | war_ftp_daemon | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wqm6-9xxx-vqhw: War FTP Daemon (WarFTPd) 1
ghsa_unreviewed·2022-05-01·CVSS 2.1
CVE-2006-5789 [LOW] GHSA-wqm6-9xxx-vqhw: War FTP Daemon (WarFTPd) 1
War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312.
GHSA
GHSA-rr63-mfwq-872f: WarFTPD 1
ghsa_unreviewed·2022-05-01
CVE-2005-0312 [LOW] GHSA-rr63-mfwq-872f: WarFTPD 1
WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability.
No detection rules found.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=110687202332039&w=2http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643http://www.securityfocus.com/bid/12384https://exchange.xforce.ibmcloud.com/vulnerabilities/19129http://marc.info/?l=bugtraq&m=110687202332039&w=2http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643http://www.securityfocus.com/bid/12384https://exchange.xforce.ibmcloud.com/vulnerabilities/19129
2005-01-27
Published