Unscored CVE-2000-0646 EUVD-2000-0642GHSA-2w42-wj39-8g7h

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file…

Published Aug 3, 2000 · Updated Aug 8, 2024 · Assigned by mitre

Description

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.

References

20000721 WFTPD/WFTPD Pro 2.41 RC11 vulnerabilities. mailing-list
1506 vdb-entry