CVE-2007-5300

Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attackers to cause a denial of service (daemon crash) via a long USER command that triggers a stack-based buffer overflow. NOTE: some of these details are obtained from third party information.
Configurations

Configuration 1

cpe:2.3:a:wzdftpd:wzdftpd:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:wzdftpd:wzdftpd:0.8.0:*:*:*:*:*:*:*

Information

Published : 2007-10-09 06:17

Updated : 2017-10-19 01:30


NVD link : CVE-2007-5300

Mitre link : CVE-2007-5300

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-189