PT-1999-1794 · Ncftp · Ncftpd

Published 1999-01-01 · Updated 2025-01-16 · CVE-1999-1568

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: NcFTPd versions prior to 2.4.1

Description: The issue is caused by an off-by-one error in the NcFTPd FTP server, allowing a remote attacker to cause a denial of service (crash) via a long PORT command.

Recommendations: For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the PORT command to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-193

Related Identifiers

CVE-1999-1568

Affected Products

Ncftpd

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-1999-1568 · Security Note
• https://t.me/cvenotify/107651 · Telegram Post
• http://marc.info/?l=bugtraq&m=91981352617720&w=2 · Note
• http://securityfocus.com/archive/1/12699 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1833 · Note
• https://t.me/cvenotify/69683 · Telegram Post