<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: guildftpd</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-4572: GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) </title><link>https://patchthecve.com/cve/CVE-2008-4572.html</link><guid>https://patchthecve.com/cve/CVE-2008-4572.html</guid><pubDate>Tue, 16 Jun 2026 22:58:05 +0000</pubDate><description>HIGH 10.0: GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly triggering a heap-based buf</description></item><item><title>CVE-2006-5133: Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code executi</title><link>https://patchthecve.com/cve/CVE-2006-5133.html</link><guid>https://patchthecve.com/cve/CVE-2006-5133.html</guid><pubDate>Tue, 16 Jun 2026 22:30:33 +0000</pubDate><description>HIGH 7.5: Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing &quot;globbing chars.&quot;</description></item><item><title>CVE-2003-1267: GuildFTPd 0.999 allows remote attackers to cause a denial of service (crash) via a GET request for MS-DOS devi</title><link>https://patchthecve.com/cve/CVE-2003-1267.html</link><guid>https://patchthecve.com/cve/CVE-2003-1267.html</guid><pubDate>Tue, 16 Jun 2026 22:03:49 +0000</pubDate><description>MEDIUM 5.0: GuildFTPd 0.999 allows remote attackers to cause a denial of service (crash) via a GET request for MS-DOS device names such as lpt1.</description></item><item><title>CVE-2001-0770: Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE comm</title><link>https://patchthecve.com/cve/CVE-2001-0770.html</link><guid>https://patchthecve.com/cve/CVE-2001-0770.html</guid><pubDate>Tue, 16 Jun 2026 21:54:55 +0000</pubDate><description>HIGH 7.5: Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE command.</description></item><item><title>CVE-2001-0769: Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request contai</title><link>https://patchthecve.com/cve/CVE-2001-0769.html</link><guid>https://patchthecve.com/cve/CVE-2001-0769.html</guid><pubDate>Tue, 16 Jun 2026 21:54:55 +0000</pubDate><description>MEDIUM 5.0: Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character.</description></item><item><title>CVE-2001-0768: GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users</title><link>https://patchthecve.com/cve/CVE-2001-0768.html</link><guid>https://patchthecve.com/cve/CVE-2001-0768.html</guid><pubDate>Tue, 16 Jun 2026 21:54:55 +0000</pubDate><description>MEDIUM 4.6: GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.</description></item><item><title>CVE-2001-0767: Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and dire</title><link>https://patchthecve.com/cve/CVE-2001-0767.html</link><guid>https://patchthecve.com/cve/CVE-2001-0767.html</guid><pubDate>Tue, 16 Jun 2026 21:54:55 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in (1) LS or (2) GET.</description></item><item><title>CVE-2000-0640: Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .</title><link>https://patchthecve.com/cve/CVE-2000-0640.html</link><guid>https://patchthecve.com/cve/CVE-2000-0640.html</guid><pubDate>Tue, 16 Jun 2026 21:52:10 +0000</pubDate><description>HIGH 7.5: Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.</description></item></channel></rss>