Vulnerabilities > CVE-2006-5789 - Resource Management Errors vulnerability in Jgaa Warftpd 1.82.00Rc11

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
jgaa
CWE-399
NVD
Published: 2006-11-07
Updated: 2018-10-17

Summary

War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312.

Vulnerable Configurations

Part Description Count
Application
Jgaa
1

Common Weakness Enumeration (CWE)

References