War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of %s format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Warftpd | Jgaa | 1.82.00_rc11 (including) | 1.82.00_rc11 (including) |