CVE-2003-0477: wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command...

Security readout for executives and security teams

CVE-2003-0477 is a remotely triggerable crash in wzdftpd 0.1rc4 and earlier. A remote attacker can cause denial of service by sending a malformed FTP PORT command with no argument. The evidence does not show data theft, code execution, or active exploitation. Exposure is limited to organizations still running wzdftpd 0.1rc4 or earlier, especially if the FTP service is reachable from untrusted networks. The provided affected-product metadata is incomplete, so confirmation requires asset inventory and version checks. Treat this as a targeted legacy-service availability risk. It is not shown as exploited or confidentiality-impacting, but internet-exposed affected FTP servers could be crashed remotely and should be retired, upgraded, or isolated. Mitigation focus: Identify any wzdftpd deployments and confirm exact versions.; Restrict FTP access to trusted networks where business use remains required.; Check vendor guidance or changelog for the fixed release path..

Prepared

Jun 30, 2026, 10:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.