PatchTheCVEguildftpd vulnerabilities and fixes
Recent CVEs affecting guildftpd, with upgrade or downgrade steps. 8 tracked.
guildftpd has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-10-15. Highest priority: CVE-2008-4572 (score 65/100).
- CVE-2008-4572 HIGH 10.0 DOWNGRADE GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash)
- CVE-2006-5133 HIGH 7.5 DOWNGRADE Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code executi
- CVE-2003-1267 MEDIUM 5.0 DOWNGRADE GuildFTPd 0.999 allows remote attackers to cause a denial of service (crash) via a GET request for MS-DOS devi
- CVE-2001-0770 HIGH 7.5 DOWNGRADE Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE comm
- CVE-2001-0769 MEDIUM 5.0 DOWNGRADE Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request contai
- CVE-2001-0768 MEDIUM 4.6 DOWNGRADE GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users
- CVE-2001-0767 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and dire
- CVE-2000-0640 HIGH 7.5 DOWNGRADE Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .
FAQ
How do I fix guildftpd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is guildftpd being exploited right now?
None of the tracked guildftpd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which guildftpd CVE should I patch first?
CVE-2008-4572 currently ranks highest (65/100): GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) .