CVE-2000-0645

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE).

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:N/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jul 21, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-06465.0WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file CVE-2000-06475.0WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server.CVE-2000-06485.0WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFCVE-2000-06492.6IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected byCVE-2000-06502.1The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade diCVE-2000-06517.5The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attCVE-2000-06525.0IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URCVE-2000-06535.0Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express winCVE-2000-06544.6Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered SeCVE-2000-06555.0Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image cCVE-2000-06565.0Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in theCVE-2000-06575.0Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the
CVE-2000-0645: Medium severity, CVSS 6.4 | Vulnix