PT-1997-1005 · Ibm+8 · Aix+10

Published 1997-12-10 · Updated 2022-08-17 · CVE-1999-0017

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FTP servers (affected versions not specified)

Description The issue allows an attacker to connect to arbitrary ports on machines other than the FTP client. This is also known as FTP bounce.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-0017

Affected Products

Aix

Freebsd

Inet

Netbsd

Open Desktop

Openlinux

Openserver

Reliant Unix

Sunos

Unixware

Wu-Ftpd

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0017 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017 · Note