warftpd vulnerabilities and fixes
Recent CVEs affecting warftpd, with upgrade or downgrade steps. 2 tracked.
warftpd has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-04-01. Highest priority: CVE-2013-2278 (score 57/100).
- CVE-2013-2278 HIGH 10.0 DOWNGRADE Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote a
- CVE-2009-5141 MEDIUM 4.0 DOWNGRADE Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause
FAQ
How do I fix warftpd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is warftpd being exploited right now?
None of the tracked warftpd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which warftpd CVE should I patch first?
CVE-2013-2278 currently ranks highest (57/100): Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote a.