CVE-2008-5666

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-19 · updated 2026-06-16
Weakness: CWE-399

Description

WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command.

Affected products

wftpserver Winftp Ftp Server: 2.3.0

References

http://secunia.com/advisories/32209
http://securityreason.com/securityalert/4785
http://www.securitytracker.com/id?1021040
http://www.vupen.com/english/advisories/2008/2801
https://exchange.xforce.ibmcloud.com/vulnerabilities/45806
https://www.exploit-db.com/exploits/6717
http://secunia.com/advisories/32209
http://securityreason.com/securityalert/4785
http://www.securitytracker.com/id?1021040
http://www.vupen.com/english/advisories/2008/2801
https://exchange.xforce.ibmcloud.com/vulnerabilities/45806
https://www.exploit-db.com/exploits/6717

Get alerted when CVE-2008-5666 or the next vulnerability affects your stack