Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute a…

published 2007-03-21 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-1561

cvss: 10.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 50.8%; EPSS 50.8% chance of exploitation in 30 days, percentile 98%
public exploits: 3; Exploit-DB

Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors, as demonstrated by warftp_165.tar by Immunity. NOTE: this might be the same issue as CVE-1999-0256, CVE-2000-0131, or CVE-2006-2171, but due to Immunity's lack of details, this cannot be certain.

Patch / fix

links 1

immunityinc.com/downloads/immpartners/warftp_165.tar patch

Timeline

2007-03-14 First public exploit (EDB-3474)
2007-03-21 Published

Exploit prediction

50.80% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-3570 WarFTP 1.65 - 'USER' Remote Buffer Overflow remote, 2007-03-25
EDB-3482 WarFTP 1.65 (Windows 2000 SP4) - 'USER' Remote Buffer Overflow remote, 2007-03-15
EDB-3474 WarFTP 1.65 (Windows 2000 SP4) - 'USER' Remote Buffer Overflow remote, 2007-03-14

CVSS scores

assigned by	version	score	vector
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

References

immunityinc.com /downloads/immpartners/warftp_165.tar
patch
secunia.com /advisories/24494
third-party-advisory, vendor-advisory
securityfocus.com /bid/22944
vdb-entry
vupen.com /english/advisories/2007/0933
vdb-entry

Sources

CVE List CVE-2007-1567
NVD CVE-2007-1567

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary