CVE-2006-5789: Jgaa Warftpd

Medium severity, CVSS 4.0. EPSS: 2.9% chance of exploitation in the next 30 days.

War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312.

Affected products

• Jgaa Warftpd: version 1.82.00_rc11 only

Published 2006-11-07. Last modified 2026-06-16.