
CVE-2009-5141 – WarFTPd 1.82.00-RC12 - 'LIST' Format String Denial of Service
https://notcve.org/view.php?id=CVE-2009-5141
01 Apr 2014 — Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial of service (crash) via format string specifiers in a LIST command. Vulnerabilidad de formato de cadena en War FTP Daemon (warftpd) 1.82 RC 12 permite a usuarios remotos autenticados causar una denegación de servicio (caída) a través de especificadores de formato de cadena en un comando LIST. • https://www.exploit-db.com/exploits/9622 • CWE-134: Use of Externally-Controlled Format String •

CVE-2013-2278
https://notcve.org/view.php?id=CVE-2013-2278
01 Apr 2014 — Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to log messages and the "internal log handler to the Windows Event log." Vulnerabilidad no especificada en War FTP Daemon (warftpd) 1.82, cuando se ejecuta como un servicio de Windows, permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitr... • http://www.securityfocus.com/archive/1/525830 •

CVE-2006-5789 – WarFTPd 1.82.00-RC11 - Remote Denial of Service
https://notcve.org/view.php?id=CVE-2006-5789
07 Nov 2006 — War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312. War FTP Daemon (WarFTPd) 1.82.00-RC11 permite a usuarios remotos autenticados provocar una denegación de servicio mediante un número grande de cadenas de formato "%s" en (1) CWD, (2)... • https://www.exploit-db.com/exploits/2735 • CWE-399: Resource Management Errors •

CVE-2006-2171
https://notcve.org/view.php?id=CVE-2006-2171
04 May 2006 — Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer. Desbordamiento de búfer en WDM.exe en WarFTPD permite a atacantes remotos ejecutar código arbitrario a través de argumentos no especificados, según lo demostrado por el Infigo FTPStress Fuzzer. • http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html •

CVE-2000-0131 – Jgaa WarFTPd 1.66 x4s/1.67-3 - 'CWD/MKD' Denial of Service
https://notcve.org/view.php?id=CVE-2000-0131
01 Feb 2000 — Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands. • https://www.exploit-db.com/exploits/19740 •

CVE-2000-0044
https://notcve.org/view.php?id=CVE-2000-0044
06 Jan 2000 — Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands. • http://www.securityfocus.com/bid/919 •

CVE-1999-1003
https://notcve.org/view.php?id=CVE-1999-1003
13 Dec 1999 — War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1003 •

CVE-1999-0256 – War-FTPD 1.65 - 'Username' Remote Overflow
https://notcve.org/view.php?id=CVE-1999-0256
01 Feb 1998 — Buffer overflow in War FTP allows remote execution of commands. • https://www.exploit-db.com/exploits/16724 •