ByteOS Network

Vulnerability Details :

CVE-2006-4318

Summary

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-24 Aug, 2006 | 01:00

Updated At-07 Aug, 2024 | 19:06

Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:24 Aug, 2006 | 01:00

Updated At:07 Aug, 2024 | 19:06

▼CVE Numbering Authority (CNA)

Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://packetstormsecurity.org/0608-exploits/wftpd_exp.c	x_refsource_MISC
http://secunia.com/advisories/21547	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/3357	vdb-entry x_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28523	vdb-entry x_refsource_XF
https://www.exploit-db.com/exploits/2233	exploit x_refsource_EXPLOIT-DB
http://securitytracker.com/id?1016723	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/19617	vdb-entry x_refsource_BID
http://www.osvdb.org/28134	vdb-entry x_refsource_OSVDB

Hyperlink: http://packetstormsecurity.org/0608-exploits/wftpd_exp.c

Resource:

x_refsource_MISC

Hyperlink: http://secunia.com/advisories/21547

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2006/3357

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/28523

Resource:

vdb-entry

x_refsource_XF

Hyperlink: https://www.exploit-db.com/exploits/2233

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://securitytracker.com/id?1016723

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/19617

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.osvdb.org/28134

Resource:

vdb-entry

x_refsource_OSVDB

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://packetstormsecurity.org/0608-exploits/wftpd_exp.c	x_refsource_MISC x_transferred
http://secunia.com/advisories/21547	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2006/3357	vdb-entry x_refsource_VUPEN x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/28523	vdb-entry x_refsource_XF x_transferred
https://www.exploit-db.com/exploits/2233	exploit x_refsource_EXPLOIT-DB x_transferred
http://securitytracker.com/id?1016723	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/19617	vdb-entry x_refsource_BID x_transferred
http://www.osvdb.org/28134	vdb-entry x_refsource_OSVDB x_transferred

Hyperlink: http://packetstormsecurity.org/0608-exploits/wftpd_exp.c

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://secunia.com/advisories/21547

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2006/3357

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/28523

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/2233

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://securitytracker.com/id?1016723

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securityfocus.com/bid/19617

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.osvdb.org/28134

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:24 Aug, 2006 | 01:04

Updated At:03 Apr, 2025 | 01:03

Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.5

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

texas_imperial_software>>wftpd>>3.23

cpe:2.3:a:texas_imperial_software:wftpd:3.23:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Texas Imperial Software

Last Modified : 2011-01-07T00:00:00

Texas Imperial Software has tested this issue against current versions of WFTPD and WFTPD Pro, and finds that versions after 3.23 are not vulnerable. Users of WFTPD or WFTPD Pro should update to the most current version in order to address this issue. The update is free to fully registered users unregistered users can download a fresh copy of the shareware version of the application.

References

Hyperlink	Source	Resource
http://packetstormsecurity.org/0608-exploits/wftpd_exp.c	cve@mitre.org	N/A
http://secunia.com/advisories/21547	cve@mitre.org	N/A
http://securitytracker.com/id?1016723	cve@mitre.org	Exploit
http://www.osvdb.org/28134	cve@mitre.org	N/A
http://www.securityfocus.com/bid/19617	cve@mitre.org	Exploit
http://www.vupen.com/english/advisories/2006/3357	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/28523	cve@mitre.org	N/A
https://www.exploit-db.com/exploits/2233	cve@mitre.org	N/A
http://packetstormsecurity.org/0608-exploits/wftpd_exp.c	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/21547	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1016723	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.osvdb.org/28134	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/19617	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.vupen.com/english/advisories/2006/3357	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/28523	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.exploit-db.com/exploits/2233	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://packetstormsecurity.org/0608-exploits/wftpd_exp.c

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/21547

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://securitytracker.com/id?1016723

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://www.osvdb.org/28134

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/19617

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://www.vupen.com/english/advisories/2006/3357

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/28523

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www.exploit-db.com/exploits/2233

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://packetstormsecurity.org/0608-exploits/wftpd_exp.c