VYPR
Unrated severityNVD Advisory· Published Oct 9, 2007· Updated Apr 23, 2026

CVE-2007-5300

CVE-2007-5300

Description

Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attackers to cause a denial of service (daemon crash) via a long USER command that triggers a stack-based buffer overflow. NOTE: some of these details are obtained from third party information.

Affected products

2
  • Wzdftpd/Wzdftpd2 versions
    cpe:2.3:a:wzdftpd:wzdftpd:0.8.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wzdftpd:wzdftpd:0.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wzdftpd:wzdftpd:0.8.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.