NetSight
high7.5

CVE-1999-0017

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Impact

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Affected products

VendorProductAffected versions
GnuInet
Versions 5.01, 6.01, 6.02
Washington UniversityWu-Ftpd
Version 2.4
CalderaOpenlinux
Version 1.2
FreebsdFreebsd
Versions 1.0, 1.1, 1.2, 2.0, 2.1.0, 2.1.7
IbmAix
Versions 3.2, 4.1, 4.2, 4.3
NetbsdNetbsd
Versions 1.0, 1.1, 1.2, 1.2.1
ScoOpen Desktop
Version 3.0
ScoOpenserver
Version 5.0.4
ScoUnixware
Version 2.1
SiemensReliant Unix
All versions
SunSunos
Versions 4.1.3u1, 4.1.4, 5.3, 5.4, 5.5, 5.5.1

References