winftp server records
3 published records for vendor winftp server.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2005-2634No exploit | Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of swinftp server · winftp server | High7.5 | — | 5.2% | Aug 23, 2005 |
21Monitor | CVE-2006-6673Proof of concept | WinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long (1) PASV, (2) LIST, (3) USER, (4) PORT, and possibwinftp server · winftp server | Medium5.0 | — | 3.0% | Dec 20, 2006 |
8Monitor | CVE-2004-2400No exploit | WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access twinftp server · winftp server | Low2.1 | — | 0.3% | Dec 31, 2004 |
- CVE-2005-263432Monitor
Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of s
HighCVSS 7.5No exploitEPSS 5%winftp server · winftp serverAug 23, 2005
- CVE-2006-667321Monitor
WinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long (1) PASV, (2) LIST, (3) USER, (4) PORT, and possib
MediumCVSS 5.0Proof of conceptEPSS 3%winftp server · winftp serverDec 20, 2006
- CVE-2004-24008Monitor
WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access t
LowCVSS 2.1No exploitEPSS 0%winftp server · winftp serverDec 31, 2004