Vulnerability in Texas_imperial_software Wftpd

CVE-2000-0646

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.

EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.

Affected products

Texas_imperial_software Wftpd — versions 2.4.1, 2.4.1_rc11, 2.34
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)