PatchTheCVE: crobhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2006-6558: Crob FTP Server 3.6.1 b.263 allows remote attackers to cause a denial of service via a long series of "?A" seqhttps://patchthecve.com/cve/CVE-2006-6558.htmlhttps://patchthecve.com/cve/CVE-2006-6558.htmlTue, 16 Jun 2026 22:33:22 +0000MEDIUM 5.0: Crob FTP Server 3.6.1 b.263 allows remote attackers to cause a denial of service via a long series of "?A" sequences in the (1) LIST and possibly (2) NLST command.CVE-2005-1873: Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute https://patchthecve.com/cve/CVE-2005-1873.htmlhttps://patchthecve.com/cve/CVE-2005-1873.htmlTue, 16 Jun 2026 22:13:50 +0000HIGH 7.5: Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP command with a large string followed by the RMD command with a long string or (2) a globbing ("*") character followed by a long string.CVE-2004-2309: Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root vhttps://patchthecve.com/cve/CVE-2004-2309.htmlhttps://patchthecve.com/cve/CVE-2004-2309.htmlTue, 16 Jun 2026 22:09:24 +0000LOW 2.1: Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command.CVE-2004-0282: Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting tohttps://patchthecve.com/cve/CVE-2004-0282.htmlhttps://patchthecve.com/cve/CVE-2004-0282.htmlTue, 16 Jun 2026 22:05:18 +0000MEDIUM 5.0: Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server.CVE-2003-1207: Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir commandhttps://patchthecve.com/cve/CVE-2003-1207.htmlhttps://patchthecve.com/cve/CVE-2003-1207.htmlTue, 16 Jun 2026 22:03:43 +0000MEDIUM 5.0: Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of "." characters followed by a "/*" string.CVE-2003-1205: Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a fihttps://patchthecve.com/cve/CVE-2003-1205.htmlhttps://patchthecve.com/cve/CVE-2003-1205.htmlTue, 16 Jun 2026 22:03:43 +0000MEDIUM 5.0: Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.CVE-2003-1206: Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crhttps://patchthecve.com/cve/CVE-2003-1206.htmlhttps://patchthecve.com/cve/CVE-2003-1206.htmlTue, 16 Jun 2026 22:03:43 +0000MEDIUM 5.0: Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the username during login, or other FTP commands such as (2) dir.