Unscored severity · published May 4, 2006
CVE-2006-2171
Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer
–
CVSS
4.7%
EPSS
No
On KEV
Description
Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Warftpd · Jgaa
1.8; 1.82_rc9; 1.82_rc10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2171
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2171
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html
marc.info
http://marc.info/?l=bugtraq&m=114658586018818&w=2
Exploit
http://www.infigo.hr/en/in_focus/tools
www.infigo.hr
http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03
www.osvdb.org
http://www.osvdb.org/25220
www.securityfocus.com
http://www.securityfocus.com/bid/17803
More from Warftpd
–
CVE-2013-2278
Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers to cause a denial of service (crash) and possibly execute…
–
CVE-2009-5141
Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial of service (crash) via format string specifiers in a LIST…
–
CVE-2006-5789
War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4)…
–
CVE-2000-0131
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands
–
CVE-2000-0044
Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands