CVE-1999-0997

published 1999-12-20

CVE-1999-0997: wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
millenux_gmbh	anonftp	—	—
redhat	linux	—	—
redhat	linux	—	—
redhat	linux	—	—
university_of_washington	wu-ftpd	—	—
university_of_washington	wu-ftpd	—	—
university_of_washington	wu-ftpd	—	—