QwikSec

Security Database

CVE

CWE

Training

CVE-2007-4844

Published: Sep 12, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service (infinite loop) by (1) repeatedly sending a 550 error response, or (2) sending a 550 error response and then disconnecting.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

unrealcommander-ftp-dos(36488)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SREASON

20070906 [HISPASEC] 2K7SEPT6 X-Diesel Unreal Commander v0.92 (build 573) multiple FTP-based vulnerabilities

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_OSVDB

http://blog.hispasec.com/lab/advisories/adv_UnrealCommander_0_92_build_573_Multiple_FTP_Based_Vulnerabilities.txt

x_refsource_MISC

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.