Unrated severityNVD Advisory· Published Oct 15, 2008· Updated Apr 23, 2026

CVE-2008-4572

Description

GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly triggering a heap-based buffer overflow.

Affected products

Guildftpd/Guildftpd
cpe:2.3:a:guildftpd:guildftpd:0.999.14:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/32218nvdVendor Advisory
securityreason.com/securityalert/4422nvd
www.securityfocus.com/bid/31729nvd
www.vupen.com/english/advisories/2008/2794nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45818nvd
www.exploit-db.com/exploits/6738nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.061
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000