PT-1999-1794 · Ncftp · Ncftpd

CVE-1999-1568 · Publicado 1999-01-01 · Atualizado 2025-01-16

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: NcFTPd versions prior to 2.4.1

Description: The issue is caused by an off-by-one error in the NcFTPd FTP server, allowing a remote attacker to cause a denial of service (crash) via a long PORT command.

Recommendations: For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the PORT command to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-193

Identificadores relacionados

CVE-1999-1568

Produtos afetados

Ncftpd

Referências · 6

• https://t.me/cvenotify/107651 · Publicação no Telegram
• http://marc.info/?l=bugtraq&m=91981352617720&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1568 · Nota de Segurança
• http://securityfocus.com/archive/1/12699 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1833 · Nota
• https://t.me/cvenotify/69683 · Publicação no Telegram