<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wftpd pro</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2001-0296: Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command</title><link>https://patchthecve.com/cve/CVE-2001-0296.html</link><guid>https://patchthecve.com/cve/CVE-2001-0296.html</guid><pubDate>Tue, 16 Jun 2026 21:54:02 +0000</pubDate><description>HIGH 10.0: Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.</description></item><item><title>CVE-2000-0876: WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the  full pathname of the server via a &quot;%C&quot; co</title><link>https://patchthecve.com/cve/CVE-2000-0876.html</link><guid>https://patchthecve.com/cve/CVE-2000-0876.html</guid><pubDate>Tue, 16 Jun 2026 21:52:39 +0000</pubDate><description>MEDIUM 5.0: WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the  full pathname of the server via a &quot;%C&quot; command, which generates an error message that includes the pathname.</description></item><item><title>CVE-2000-0875: WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of</title><link>https://patchthecve.com/cve/CVE-2000-0875.html</link><guid>https://patchthecve.com/cve/CVE-2000-0875.html</guid><pubDate>Tue, 16 Jun 2026 21:52:39 +0000</pubDate><description>MEDIUM 5.0: WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.</description></item></channel></rss>