CVE-2001-0053: David Madore Ftpd-Bsd

High severity, CVSS 10.0. EPSS: 17.9% chance of exploitation in the next 30 days.

One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

Affected products

• David Madore Ftpd-Bsd: version 0.2.3 only
• Netbsd Netbsd: version 1.4 only; version 1.4.1 only; version 1.4.2 only; version 1.5 only
• OpenBSD OpenBSD: version 2.4 only; version 2.5 only; version 2.6 only; version 2.7 only; version 2.8 only

Published 2001-02-12. Last modified 2026-06-16.