CVE-2007-1731: Hpaftpd

High severity, CVSS 10.0. EPSS: 4.8% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in High Performance Anonymous FTP Server (hpaftpd) 1.01 allow remote attackers to execute arbitrary code via long arguments to the (1) USER, (2) PASS, (3) CWD, (4) MKD, (5) RMD, (6) DELE, (7) RNFR, or (8) RNTO FTP command.

Affected products

• Hpaftpd Hpaftpd: version 1.01 only

Published 2007-03-28. Last modified 2026-06-16.