CVEvulnerability

CVE-2004-0341

2.1 LOW Published 2004-11-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-11-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P

Description

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline.

Affected configurations

• texas imperial software wftpd 3.0 • texas imperial software wftpd 3.0 0r3 • texas imperial software wftpd 3.0 0r4 • texas imperial software wftpd 3.0 0r5 • texas imperial software wftpd 3.10 r1 • texas imperial software wftpd 3.20 • texas imperial software wftpd 3.21 • texas imperial software wftpd pro 3.10 r1 • texas imperial software wftpd pro 3.20 • texas imperial software wftpd pro 3.21

References