high7.5Public exploit code
CVE-1999-0997
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WU-FTPD 2.4.2/2.5 .0/2.6.0/2.6.1/2.6.2 - FTP Conversion1999-12-20 · remote · unix · Verified
Impact
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Millenux Gmbh | Anonftp | Version 2.8.1 |
| University Of Washington | Wu-Ftpd | Versions 2.4.2, 2.5.0, 2.6.0 |
| Redhat | Linux | Versions 5.2, 6.0, 6.1 |