VULNERABILITY INTELLIGENCE

CVE-2007-4844

CVSS score4.3 MEDIUM
EPSS probability1.28%
CISA KEVNot currently listed
Published2007-09-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service (infinite loop) by (1) repeatedly sending a 550 error response, or (2) sending a 550 error response and then disconnecting.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references