CVE-2003-1207: Crob FTP Server

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of "." characters followed by a "/*" string.

Affected products

• Crob Crob FTP Server: version 3.5.1 only

Published 2004-02-01. Last modified 2026-06-16.