oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) characters.

Exploit prediction (EPSS)

3.43% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

Exploits and detections

• EDB-25943 OFTPD 0.3.x - User Command Buffer Overflow · dos · 2005-07-06

CVSS scores

References

• securitytracker.com /id?1014413 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

• CVE List: CVE-2005-2239
• NVD: CVE-2005-2239

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.