War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of \%s\ format strings in (1) CWD (2) CDUP (3) DELE (4) NLST (5) LIST (6) SIZE and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312.