VULNERABILITY INTELLIGENCE

CVE-2000-0646

CVSS score5 MEDIUM

EPSS probability2.25%

CISA KEVNot currently listed

Published2000-07-21

Last modified2026-06-16

Description

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred.