CVE-2005-3081
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell...
CVE-2005-3081 is a medium vulnerability (CVSS 4.6) in Wzdftpd, published September 27, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 76.6%, the 99th percentile. Fixed in wzdftpd 0.5.2-1.1sarge1.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 76.6%EPSS, 99th percentile
- Exploitation
- None known2 public exploits
- Fixed in
0.5.2-1.1sarge1wzdftpd
Description
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wzdftpdDebian:3.1 | before 0.5.2-1.1sarge1, plus listed versions 0.5.2-1 | 0.5.2-1.1sarge1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | WzdFTPD 0.5.4 - Remote Command Execution | 2005-09-24 |
| Exploit-DB | WzdFTPD 0.5.4 - 'SITE' Remote Command Execution (Metasploit) | 2005-11-04 |
What each source reports
NVD Score used 4.6
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
- Record
CVE-2005-3081- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
- Record
CVE-2005-3081- Updated
- 2026-11-02
EUVDEUVD-2005-3081No score
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
- Record
EUVD-2005-3081- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cgf8-qhr6-x48vNo score
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell...
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
- Record
GHSA-cgf8-qhr6-x48v- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.