CVE-2005-0312: War FTP Daemon

Low severity, CVSS 2.1. EPSS: 2.7% chance of exploitation in the next 30 days.

WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability.

Affected products

• War FTP Daemon War FTP Daemon: version 1.8 only; version 1.82_rc9 only

Published 2005-01-27. Last modified 2026-06-16.