Vulnerabilities > CVE-2007-0311 - Remote Denial of Service vulnerability in WFTPD Server SITE ADMIN Command

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
texas-imperial-software
exploit available

Summary

Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service (application crash) via a long SITE ADMIN command.

Vulnerable Configurations

Part Description Count
Application
Texas_Imperial_Software
2

Exploit-Db

descriptionWFTPD Pro Server <= 3.25 SITE ADMN Remote Denial of Service Exploit. CVE-2007-0311. Dos exploit for windows platform
fileexploits/windows/dos/3126.c
idEDB-ID:3126
last seen2016-01-31
modified2007-01-14
platformwindows
port
published2007-01-14
reporterMarsu
sourcehttps://www.exploit-db.com/download/3126/
titleWFTPD Pro Server <= 3.25 SITE ADMN Remote Denial of Service Exploit
typedos

Statements

contributorTexas Imperial Software
lastmodified2011-01-07
organizationTexas Imperial Software
statementTexas Imperial Software has tested this issue against current versions of WFTPD and WFTPD Pro, and finds that versions after 3.25 are not vulnerable. Users of WFTPD or WFTPD Pro should update to the most current version in order to address this issue. The update is free to fully registered users unregistered users can download a fresh copy of the shareware version of the application.