CVE-1999-0368
published 1999-02-09CVE-1999-0368: Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
PriorityP349critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
39.84%
98.6th percentile
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| caldera | openlinux | — | — |
| debian | debian_linux | — | — |
| proftpd_project | proftpd | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
| sco | openserver | — | — |
| sco | openserver | — | — |
| sco | openserver | — | — |
| sco | openserver | — | — |
| sco | openserver | — | — |
| sco | unixware | — | — |
| sco | unixware | — | — |
| slackware | slackware_linux | — | — |
| slackware | slackware_linux | — | — |
| slackware | slackware_linux | — | — |
| washington_university | wu-ftpd | — | — |
| washington_university | wu-ftpd | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
GPL FTP MKD overflow
suricata·2010-09-23
CVE-1999-0368 GPL FTP MKD overflow
GPL FTP MKD overflow
Rule: alert ftp $EXTERNAL_NET any -> $HOME_NET any (msg:"GPL FTP MKD overflow"; flow:established,to_server; content:"MKD "; isdataat:100,relative; reference:bugtraq,113; reference:bugtraq,2242; reference:cve,1999-0368; classtype:attempted-admin; sid:2100349; rev:14; metadata:created_at 2010_09_23, cve CVE_1999_0368, signature_severity Unknown, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)
Exploit-DB
WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1)
exploitdb·1999-02-09
CVE-1999-0368 WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1)
WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1)
---
/*
source: https://www.securityfocus.com/bid/113/info
There is a vulnerability in ProFTPD versions 1.2.0pre1 and earlier and in wu-ftpd 2.4.2 (beta 18) VR9 and earlier. This vulnerability is a buffer overflow triggered by unusually long path names (directory structures). For example, if a user has write privilages he or she may create an unusually long pathname which due to insuficient bounds checking in ProFTPD will overwrite the stack. This will allow the attacker to insert their own instruction set on the stack to be excuted thereby elavating their access.
The problem is in a bad implementation of the "realpath" function.
*/
/*
* Remote/local exploit for wu-ftpd [12] through [18]
*
Exploit-DB
WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (2)
exploitdb·1999-02-09
CVE-1999-0368 WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (2)
WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (2)
---
/*
source: https://www.securityfocus.com/bid/113/info
There is a vulnerability in ProFTPD versions 1.2.0pre1 and earlier and in wu-ftpd 2.4.2 (beta 18) VR9 and earlier. This vulnerability is a buffer overflow triggered by unusually long path names (directory structures). For example, if a user has write privilages he or she may create an unusually long pathname which due to insuficient bounds checking in ProFTPD will overwrite the stack. This will allow the attacker to insert their own instruction set on the stack to be excuted thereby elavating their access.
The problem is in a bad implementation of the "realpath" function.
*/
/*
* SDI wu-ftpd exploit for Linux (Feb 20, 1999)
*
* http
No writeups or analysis indexed.
1999-02-09
Published