Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

GuildFTPd 0.999.13 can run attacker code via crafted input

CVE-2006-5133 · published 20 years ago
Summary

The GuildFTPd server version 0.999.13 has a buffer overflow that can be triggered by specially crafted data containing certain characters. An attacker on the network could potentially make the server execute their own code. Upgrade to a newer version or apply the vendor's patch as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
steve_poulsen guildftpd 0.999.13
cpe:2.3:a:steve_poulsen:guildftpd:0.999.13:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing "globbing chars."
Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing "globbing chars."
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Timeline
Published3 Oct 2006
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2006-5133 · NVD
Track software like this
Free during beta