CVE-2007-4844: X-Diesel Unreal Commander

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service (infinite loop) by (1) repeatedly sending a 550 error response, or (2) sending a 550 error response and then disconnecting.

Affected products

• X-Diesel Unreal Commander: version 0.92_build565 only; version 0.92_build573 only

Published 2007-09-12. Last modified 2026-06-16.