https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-0256.htmlhttps://patchthecve.com/cve/CVE-2005-0256.htmlTue, 16 Jun 2026 22:10:47 +0000MEDIUM 5.0: The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.https://patchthecve.com/cve/CVE-2004-0148.htmlhttps://patchthecve.com/cve/CVE-2004-0148.htmlTue, 16 Jun 2026 22:05:02 +0000HIGH 7.2: wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.https://patchthecve.com/cve/CVE-2004-0185.htmlhttps://patchthecve.com/cve/CVE-2004-0185.htmlTue, 16 Jun 2026 22:05:07 +0000HIGH 10.0: Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.https://patchthecve.com/cve/CVE-2003-1329.htmlhttps://patchthecve.com/cve/CVE-2003-1329.htmlTue, 16 Jun 2026 22:03:56 +0000HIGH 7.8: ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service.https://patchthecve.com/cve/CVE-2003-1327.htmlhttps://patchthecve.com/cve/CVE-2003-1327.htmlTue, 16 Jun 2026 22:03:56 +0000HIGH 9.3: Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow whenhttps://patchthecve.com/cve/CVE-2003-0854.htmlhttps://patchthecve.com/cve/CVE-2003-0854.htmlTue, 16 Jun 2026 22:03:05 +0000LOW 2.1: ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.https://patchthecve.com/cve/CVE-2003-0853.htmlhttps://patchthecve.com/cve/CVE-2003-0853.htmlTue, 16 Jun 2026 22:03:05 +0000MEDIUM 5.0: An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.https://patchthecve.com/cve/CVE-2001-0550.htmlhttps://patchthecve.com/cve/CVE-2001-0550.htmlTue, 16 Jun 2026 21:54:30 +0000HIGH 7.5: wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).https://patchthecve.com/cve/CVE-2001-0935.htmlhttps://patchthecve.com/cve/CVE-2001-0935.htmlTue, 16 Jun 2026 21:55:15 +0000HIGH 7.5: Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.https://patchthecve.com/cve/CVE-2001-0187.htmlhttps://patchthecve.com/cve/CVE-2001-0187.htmlTue, 16 Jun 2026 21:53:50 +0000HIGH 10.0: Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.https://patchthecve.com/cve/CVE-2000-0574.htmlhttps://patchthecve.com/cve/CVE-2000-0574.htmlTue, 16 Jun 2026 21:52:01 +0000MEDIUM 5.0: FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.https://patchthecve.com/cve/CVE-1999-0878.htmlhttps://patchthecve.com/cve/CVE-1999-0878.htmlTue, 16 Jun 2026 21:49:14 +0000HIGH 10.0: Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.https://patchthecve.com/cve/CVE-1999-0368.htmlhttps://patchthecve.com/cve/CVE-1999-0368.htmlTue, 16 Jun 2026 21:48:14 +0000HIGH 10.0: Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.