CVE-2000-0645: WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) c...

Security readout for executives and security teams

An old FTP server product called WFTPD and WFTPD Pro version 2.41 can be crashed by a remote user who sends specific FTP commands in an unusual order. The impact is a denial of service, meaning the FTP server becomes unavailable until it is restarted. There is no indication of data theft or system takeover tied to this specific issue in the cited sources. Exposure is limited to environments still running WFTPD or WFTPD Pro 2.41, an obsolete Windows FTP server product from 2000. Modern enterprises should have no production footprint; any residual exposure would be on legacy or forgotten hosts. Internet-exposed FTP on such systems is the primary risk surface, but usage today is expected to be negligible. Low priority for most organizations. Only relevant if legacy WFTPD 2.41 servers remain in service; in that case, plan replacement rather than patch-in-place. No evidence of active exploitation or data-loss impact in the cited sources. Mitigation focus: Inventory any remaining WFTPD or WFTPD Pro installations, especially version 2.41, across the environment.; Retire or replace legacy WFTPD instances with a supported, modern FTP or SFTP server.; If retention is unavoidable, restrict FTP access to trusted networks via firewall or VPN..

Prepared

Jul 12, 2026, 01:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.