CVE-2004-0341

WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:texas_imperial_software:wftpd:3.0:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.0:*:pro:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r3:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r4:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r4:*:pro:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r5:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r5:*:pro:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.10_r1:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.20:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:3.21:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:pro_3.10_r1:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:pro_3.20:*:*:*:*:*:*:*
cpe:2.3:a:texas_imperial_software:wftpd:pro_3.21:*:*:*:*:*:*:*

History

20 Nov 2024, 23:48

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=107801142924976&w=2 - () http://marc.info/?l=bugtraq&m=107801142924976&w=2 -
References () http://secunia.com/advisories/11001 - () http://secunia.com/advisories/11001 -
References () http://www.osvdb.org/4115 - () http://www.osvdb.org/4115 -
References () http://www.securityfocus.com/bid/9767 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/9767 - Exploit, Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/15341 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/15341 -

Information

Published : 2004-11-23 05:00

Updated : 2024-11-20 23:48


NVD link : CVE-2004-0341

Mitre link : CVE-2004-0341

CVE.ORG link : CVE-2004-0341


JSON object : View

Products Affected

texas_imperial_software

  • wftpd