CVE-2000-0646: Texas Imperial Software Wftpd

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.

Affected products

• Texas Imperial Software Wftpd: version 2.4.1 only; version 2.4.1_rc11 only; version 2.34 only; version 2.40 only

Published 2000-07-21. Last modified 2026-06-16.