CVE-2000-0131: Buffer Overflow
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Warftpdfrom your environment.Uninstall or stop War FTPd (affected versions 1.6x) if it is not required, or take the service offline until a vendor patch or fixed version is made available.
- Compensating control
Restrict access to the War FTPd service to trusted IPs only (network firewall, ACLs or VPN) or otherwise isolate the service from untrusted networks to prevent remote users from sending long MKD/CWD commands that trigger the overflow.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0131?
CVE-2000-0131 is classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2000-0131?
To fix CVE-2000-0131, upgrade to a patched version of War FTPd that addresses the buffer overflow.
Which versions of War FTPd are affected by CVE-2000-0131?
CVE-2000-0131 affects War FTPd versions 1.66x4s and 1.67.3.
What type of attack is CVE-2000-0131 associated with?
CVE-2000-0131 is associated with buffer overflow attacks resulting from long MKD and CWD commands.
What impact does CVE-2000-0131 have on system security?
The impact of CVE-2000-0131 can lead to a denial of service by crashing the affected War FTPd service.