PT-1999-1457 · Wu Ftpd+2 · Wu-Ftpd+2

Published 1999-08-27 · Updated 2008-09-09 · CVE-1999-0911

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ProFTPD (affected versions not specified) wu-ftpd (affected versions not specified) beroftpd (affected versions not specified)

Description A buffer overflow issue allows remote attackers to gain root access. This is achieved by sending a series of MKD and CWD commands that create nested directories.

Recommendations For ProFTPD, update to a version that includes a fix for this issue. For wu-ftpd, update to a version that includes a fix for this issue. For beroftpd, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the MKD and CWD commands until a patch is available.

Exploit

Fix

Related Identifiers

CVE-1999-0911

Affected Products

Proftpd

Beroftpd

Wu-Ftpd

References · 5

• 🔥 https://exploit-db.com/exploits/19476 · Exploit
• 🔥 https://exploit-db.com/exploits/19475 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0911 · Security Note
• http://debian.org/security/1999/19990210 · Note
• http://securityfocus.com/bid/612 · Note