Vulnerabilities

TI-2006-06417 CVE-2006-6673 · GHSA-hx4r-p5pc-mgp6

WinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long…

LOW 28

WinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long (1) PASV, (2) LIST, (3) USER, (4) PORT, and possibly other commands.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0301 Published 2006-12-21 No fix listed

TI-2005-02498 CVE-2005-2634 · GHSA-xhr8-rwrh-56m7

Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server…

MEDIUM 41

Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long reques…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05247 Published 2005-08-20 No fix listed

TI-2004-02271 CVE-2004-2400 · GHSA-8mmj-gx43-rp8c

WinFTP Server 1.6 stores username and password credentials in plaintext in the…

LOW 11

WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access to the credentials.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00336 Published 2005-08-17 No fix listed

Vulnerabilities

Filters

WinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long…

Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server…

WinFTP Server 1.6 stores username and password credentials in plaintext in the…