2 results (0.003 seconds)

CVSS: 4.0EPSS: 5%CPEs: 1EXPL: 2

CVE-2006-5789 – WarFTPd 1.82.00-RC11 - Remote Denial of Service

https://notcve.org/view.php?id=CVE-2006-5789

War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312. War FTP Daemon (WarFTPd) 1.82.00-RC11 permite a usuarios remotos autenticados provocar una denegación de servicio mediante un número grande de cadenas de formato "%s" en (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, y posiblemente otros comandos. NOTA: es posible que el vector 1 sea una variante de superación de límite (off-by-one) o un arreglo incompleto de CVE-2005-0312. • https://www.exploit-db.com/exploits/2735 http://secunia.com/advisories/22755 http://securityreason.com/securityalert/1832 http://securitytracker.com/id?1017174 http://www.securityfocus.com/archive/1/450804/100/0/threaded http://www.securityfocus.com/bid/20944 http://www.vupen.com/english/advisories/2006/4398 https://exchange.xforce.ibmcloud.com/vulnerabilities/30077 • CWE-399: Resource Management Errors •

CVSS: 6.4EPSS: 3%CPEs: 3EXPL: 1

CVE-2006-2171

https://notcve.org/view.php?id=CVE-2006-2171

Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer. Desbordamiento de búfer en WDM.exe en WarFTPD permite a atacantes remotos ejecutar código arbitrario a través de argumentos no especificados, según lo demostrado por el Infigo FTPStress Fuzzer. • http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html http://marc.info/?l=bugtraq&m=114658586018818&w=2 http://www.infigo.hr/en/in_focus/tools http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 http://www.osvdb.org/25220 http://www.securityfocus.com/bid/17803 https://exchange.xforce.ibmcloud.com/vulnerabilities/26304 •