CVE-1999-0017
First published: Wed Dec 10 1997(Updated: )
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| gnu inet | =5.01 | |
| gnu inet | =6.01 | |
| gnu inet | =6.02 | |
| wu-ftpd | =2.4 | |
| SCO OpenLinux Server | =1.2 | |
| FreeBSD FreeBSD | =1.0 | |
| FreeBSD FreeBSD | =1.1 | |
| FreeBSD FreeBSD | =1.2 | |
| FreeBSD FreeBSD | =2.0 | |
| FreeBSD FreeBSD | =2.1.0 | |
| FreeBSD FreeBSD | =2.1.7 | |
| IBM AIX | =3.2 | |
| IBM AIX | =4.1 | |
| IBM AIX | =4.2 | |
| IBM AIX | =4.3 | |
| NetBSD NetBSD | =1.0 | |
| NetBSD NetBSD | =1.1 | |
| NetBSD NetBSD | =1.2 | |
| NetBSD NetBSD | =1.2.1 | |
| SCO Open Desktop | =3.0 | |
| Xinuos OpenServer | =5.0.4 | |
| Xinuos UnixWare | =2.1 | |
| Siemens Reliant Unix | ||
| Sun SunOS | =4.1.3u1 | |
| Sun SunOS | =4.1.4 | |
| Sun SunOS | =5.3 | |
| Sun SunOS | =5.4 | |
| Sun SunOS | =5.4 | |
| Sun SunOS | =5.5 | |
| Sun SunOS | =5.5 | |
| Sun SunOS | =5.5.1 | |
| Sun SunOS | =5.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-1999-0017?
The severity of CVE-1999-0017 is considered to be high due to its potential to allow unauthorized access to arbitrary ports on remote machines.
How do I fix CVE-1999-0017?
To fix CVE-1999-0017, it is recommended to upgrade to a version of the affected FTP server software that has patched this vulnerability.
Which software versions are affected by CVE-1999-0017?
CVE-1999-0017 affects several versions of GNU Inet, Wu-FTPD, FreeBSD, IBM AIX, and Sun SunOS, among others.
What is FTP bounce as described in CVE-1999-0017?
FTP bounce refers to the ability of an attacker to use an FTP server to send requests to other ports on different machines, potentially bypassing firewall restrictions.
Is CVE-1999-0017 still a relevant vulnerability today?
While CVE-1999-0017 is an older vulnerability, it remains relevant for legacy systems that still use vulnerable FTP servers.
- agent/type
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-historical
- vendor/gnu
- canonical/gnu inet
- version/gnu inet/5.01
- version/gnu inet/6.01
- version/gnu inet/6.02
- vendor/washington university
- canonical/wu-ftpd
- version/wu-ftpd/2.4
- vendor/caldera
- canonical/sco openlinux server
- version/sco openlinux server/1.2
- vendor/freebsd
- canonical/freebsd freebsd
- version/freebsd freebsd/1.0
- version/freebsd freebsd/1.1
- version/freebsd freebsd/1.2
- version/freebsd freebsd/2.0
- version/freebsd freebsd/2.1.0
- version/freebsd freebsd/2.1.7
- vendor/ibm
- canonical/ibm aix
- version/ibm aix/3.2
- version/ibm aix/4.1
- version/ibm aix/4.2
- version/ibm aix/4.3
- vendor/netbsd
- canonical/netbsd netbsd
- version/netbsd netbsd/1.0
- version/netbsd netbsd/1.1
- version/netbsd netbsd/1.2
- version/netbsd netbsd/1.2.1
- vendor/sco
- canonical/sco open desktop
- version/sco open desktop/3.0
- canonical/xinuos openserver
- version/xinuos openserver/5.0.4
- canonical/xinuos unixware
- version/xinuos unixware/2.1
- vendor/siemens
- canonical/siemens reliant unix
- vendor/sun
- canonical/sun sunos
- version/sun sunos/4.1.3u1
- version/sun sunos/4.1.4
- version/sun sunos/5.3
- version/sun sunos/5.4
- version/sun sunos/5.5
- version/sun sunos/5.5.1