CVE-1999-0997

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

1999-12-20

Last modified

2024-08-01

Affected products

• Anonftp (Millenux Gmbh)
• Linux (Redhat)
• Wu-ftpd (University Of Washington)

References

• http://www.debian.org/security/2003/dsa-377