CVE-2007-5300 - CVE House
Back to Database
Status published Medium CVE-2007-5300

Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd...

Vulnerability Description

Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attackers to cause a denial of service (daemon crash) via a long USER command that triggers a stack-based buffer overflow. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5300

Credits & Attribution

No credits recorded in the NVD database.

References

More from wzdftpd

View All →
CVE-2007-0428
Unspecified vulnerability in the chtbl_lookup function in hash.c for WzdFTPD...
Medium 5
CVE-2005-3081
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands...
Medium 4.6
CVE-2003-0477
wzdftpd 0.1rc4 and earlier allows remote attackers to cause a...
Medium 5

Affected Vendor

Affected Software

wzdftpd
Vulnerable Versions:
0.8.0, 0.8.2

Timeline

Official Publish: October 9th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.