PT-1999-1553 · Vermillion · Vftpd

Published 1999-11-22 · Updated 2017-12-19 · CVE-1999-1058

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Vermillion FTP Daemon VFTPD version 1.23

Description A buffer overflow issue allows remote attackers to cause a denial of service and possibly execute arbitrary commands via several long CWD commands.

Recommendations For version 1.23, update to a newer version that contains a fix for this issue to prevent potential denial of service and arbitrary command execution.

Fix

Related Identifiers

CVE-1999-1058

Affected Products

Vftpd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-1999-1058 · Security Note
• http://marc.info/?l=bugtraq&m=94329968617085&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3543 · Note
• http://securityfocus.com/bid/818 · Note
• http://marc.info/?l=ntbugtraq&m=94337185023159&w=2 · Note