CVE-2009-5141
CVE-2009-5141 is a medium-severity vulnerability in Jgaa Warftpd with a CVSS 2.0 base score of 4.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-134.
Key facts
- Severity: Medium (CVSS 2.0 base score 4.0)
- EPSS exploit prediction: 3% (85th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-134
- Affected product: Jgaa Warftpd
- Published:
- Last modified:
Description
Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial of service (crash) via format string specifiers in a LIST command.
Frequently asked questions
- What is CVE-2009-5141?
- Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial of service (crash) via format string specifiers in a LIST command.
- How severe is CVE-2009-5141?
- CVE-2009-5141 has a CVSS 2.0 base score of 4.0, rated medium severity.
- Is CVE-2009-5141 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (85th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2009-5141?
- CVE-2009-5141 affects Jgaa Warftpd. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2009-5141?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2009-5141 published?
- CVE-2009-5141 was published on 2014-04-01 and last updated on 2026-06-16.
References
- http://archives.neohapsis.com/archives/bugtraq/2009-09/0105.html
- http://www.exploit-db.com/exploits/9622
- http://www.osvdb.org/62599
- http://www.warftp.org/index.php?menu=338&cmd=show_article&article_id=1003
- https://www.corelan.be/index.php/forum/security-advisories-archive-2009/corelan-09001-warftpd-1-82-rc12-dos/
Affected products (1)
- cpe:2.3:a:jgaa:warftpd:1.8.2:rc12:*:*:*:*:*:*
More vulnerabilities in Jgaa Warftpd
- CVE-2013-2278 — Critical (CVSS 10.0): Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers…
- CVE-2000-0044 — Critical (CVSS 10.0): Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.
- CVE-1999-0256 — High (CVSS 7.5): Buffer overflow in War FTP allows remote execution of commands.
- CVE-2006-2171 — Medium (CVSS 6.4): Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as…
- CVE-2000-0131 — Medium (CVSS 5.0): Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
- CVE-1999-1003 — Medium (CVSS 5.0): War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
All CVEs affecting Jgaa Warftpd →
Other CWE-134 vulnerabilities
- CVE-2012-1851 — Critical (CVSS 10.0): Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,…
- CVE-2012-0242 — Critical (CVSS 10.0): Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary…
- CVE-2011-2475 — Critical (CVSS 10.0): Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server…
- CVE-2011-1568 — Critical (CVSS 10.0): Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and…
- CVE-2010-4235 — Critical (CVSS 10.0): Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server…
- CVE-2011-0270 — Critical (CVSS 10.0): Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows…