CVE-2004-0340: Texas Imperial Software Wftpd

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.

Affected products

• Texas Imperial Software Wftpd: version 3.0 only; version 3.0_0r3 only; version 3.0_0r4 only; version 3.0_0r5 only; version 3.10_r1 only; version 3.20 only; …

Published 2004-11-23. Last modified 2026-06-16.