CVE-1999-0017 — Improper Privilege Management in Openlinux

CWE-269 — Improper Privilege Management5 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 32.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Caldera OpenlinuxFreebsdGNU Inet+7 more
Timeline
PublishedDec 10
Latest updateMay 1

Description

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages8 packages

▶NVDibm/aix4 versions+3
▶NVDgnu/inet5.01, 6.01, 6.02+2
▶NVDsun/sunos6 versions+5
▶NVDsco/unixware2.1
▶NVDsco/openserver5.0.4

Also affects: Netbsd 1.0, 1.1, 1.2, 1.2.1, Freebsd 1.0, 1.1, 1.2, 2.0, 2.1.0, 2.1.7

🔴Vulnerability Details

3
GHSA
Improper privilege management in pyftpdlib↗2022-05-01
▶
GHSA
GHSA-mq66-4xx4-r348: FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce↗2022-04-30
▶
CVEList
CVE-1999-0017: FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce↗1999-09-29
▶

💥Exploits & PoCs

1
Exploit-DB
Linuxconf 1.1.6 r10 - Remote Buffer Overflow↗1999-12-21
▶
CVE-1999-0017 — Improper Privilege Management | cvebase