CVE-2004-0185: Washington University Wu-Ftpd

High severity, CVSS 10.0. EPSS: 7.4% chance of exploitation in the next 30 days.

Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

Affected products

• Washington University Wu-Ftpd: version 2.6.2 only

Published 2004-03-15. Last modified 2026-06-16.