CVE-2008-5666: Wftpserver Winftp FTP Server

Low severity, CVSS 3.5. EPSS: 20.6% chance of exploitation in the next 30 days.

WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence of FTP sessions that include an invalid "NLST -1" command.

Affected products

• Wftpserver Winftp FTP Server: version 2.3.0 only

Published 2008-12-19. Last modified 2026-06-16.