CVE-2000-0646

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-07-21 · updated 2026-06-16

Description

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.

Affected products

Texas Imperial Software Wftpd: 2.4.1, 2.4.1_rc11, 2.34, 2.40

References

http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
http://www.securityfocus.com/bid/1506
http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html
http://www.securityfocus.com/bid/1506

Get alerted when CVE-2000-0646 or the next vulnerability affects your stack