CVE-2006-5789: Medium severity Jgaa Warftpd vulnerability

Published Nov 7, 2006

Updated

War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312.

Affected Software

1 affected component

Jgaa Warftpd=1.82.00_rc11

Event History

Nov 7, 2006

CVE Published

11:07 PM

Data Sourced

via NVD·11:07 PM

DescriptionSeverityWeaknessAffected Software

Nov 8, 2006

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5789?

CVE-2006-5789 is classified as a denial of service vulnerability that can be exploited by remote authenticated users.

How do I fix CVE-2006-5789?

To fix CVE-2006-5789, it is recommended to upgrade War FTP Daemon to a version that addresses the vulnerability.

Who is affected by CVE-2006-5789?

CVE-2006-5789 affects users of War FTP Daemon version 1.82.00-RC11.

What types of commands are involved in CVE-2006-5789?

CVE-2006-5789 involves several FTP commands, including CWD, CDUP, DELE, NLST, LIST, and SIZE.

What can attackers do with CVE-2006-5789?

Attackers can exploit CVE-2006-5789 to cause a denial of service by sending a large number of format strings in specific FTP commands.