critical10.0Public exploit code
CVE-1999-0368
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (2)1999-02-09 · remote · linux · Verified
- WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1)1999-02-09 · remote · linux · Verified
Impact
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Proftpd Project | Proftpd | Version 1.2_pre1 |
| Washington University | Wu-Ftpd | Versions 2.4.2_beta18, 2.4.2_beta18_vr9 |
| Caldera | Openlinux | Version 1.3 |
| Debian | Debian Linux | Version 2.0 |
| Redhat | Linux | Versions 5.0, 5.1 |
| Sco | Openserver | Versions 5.0, 5.0.2, 5.0.3, 5.0.4, 5.0.5 |
| Sco | Unixware | Versions 7.0, 7.0.1 |
| Slackware | Slackware Linux | Versions 3.4, 3.5, 3.6 |