Vulnerabilities

TI-2002-02329 CVE-2002-2417 · GHSA-62gr-x8g8-959r

acFTP 1.4 does not properly handle when an invalid password is provided by the user…

MEDIUM 50

acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privilege…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04185 Published 2007-11-01 No fix listed CWE-287

TI-2006-06519 CVE-2006-6775 · GHSA-34wq-9xgr-wg53

acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted…

LOW 21

acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01966 Published 2006-12-27 No fix listed

TI-2006-02183 CVE-2006-2242 · GHSA-q8qp-qqwx-qgcf

acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a…

LOW 29

acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) characters to the USER command.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03826 Published 2006-05-09 No fix listed

Vulnerabilities

Filters

acFTP 1.4 does not properly handle when an invalid password is provided by the user…

acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted…

acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a…