Washington University Wu-ftpd any version

Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.

Buffer overflow in wu-ftp from PASV command causes a core dump.

wu-ftp allows files to be overwritten via the rnfr command.

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.

wu-ftpd FTP daemon allows any user and password combination.