CVE-1999-0017
First published: Wed Dec 10 1997(Updated: )
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| inet | =5.01 | |
| inet | =6.01 | |
| wu-ftpd | =2.4 | |
| inet | =6.02 | |
| SunOS | =5.5 | |
| IBM AIX | =4.3 | |
| SCO Open Desktop | =3.0 | |
| SunOS | =5.3 | |
| SCO OpenLinux Server | =1.2 | |
| SunOS | =4.1.4 | |
| IBM AIX | =4.2 | |
| NetBSD current | =1.2.1 | |
| FreeBSD Kernel | =2.1.7 | |
| SunOS | =5.5 | |
| Siemens Reliant Unix | ||
| NetBSD current | =1.0 | |
| SunOS | =5.4 | |
| Xinuos UnixWare | =2.1 | |
| FreeBSD Kernel | =1.0 | |
| SunOS | =5.5.1 | |
| FreeBSD Kernel | =1.1 | |
| NetBSD current | =1.1 | |
| FreeBSD Kernel | =2.1.0 | |
| SunOS | =5.4 | |
| SunOS | =5.5.1 | |
| SunOS | =4.1.3u1 | |
| IBM AIX | =4.1 | |
| FreeBSD Kernel | =1.2 | |
| IBM AIX | =3.2 | |
| NetBSD current | =1.2 | |
| SCO OpenServer | =5.0.4 | |
| FreeBSD Kernel | =2.0 | |
| =5.01 | ||
| =6.01 | ||
| =6.02 | ||
| =2.4 | ||
| =1.2 | ||
| =1.0 | ||
| =1.1 | ||
| =1.2 | ||
| =2.0 | ||
| =2.1.0 | ||
| =2.1.7 | ||
| =3.2 | ||
| =4.1 | ||
| =4.2 | ||
| =4.3 | ||
| =1.0 | ||
| =1.1 | ||
| =1.2 | ||
| =1.2.1 | ||
| =3.0 | ||
| =5.0.4 | ||
| =2.1 | ||
| =4.1.3u1 | ||
| =4.1.4 | ||
| =5.3 | ||
| =5.4 | ||
| =5.4 | ||
| =5.5 | ||
| =5.5 | ||
| =5.5.1 | ||
| =5.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-1999-0017?
The severity of CVE-1999-0017 is considered to be high due to its potential to allow unauthorized access to arbitrary ports on remote machines.
How do I fix CVE-1999-0017?
To fix CVE-1999-0017, it is recommended to upgrade to a version of the affected FTP server software that has patched this vulnerability.
Which software versions are affected by CVE-1999-0017?
CVE-1999-0017 affects several versions of GNU Inet, Wu-FTPD, FreeBSD, IBM AIX, and Sun SunOS, among others.
What is FTP bounce as described in CVE-1999-0017?
FTP bounce refers to the ability of an attacker to use an FTP server to send requests to other ports on different machines, potentially bypassing firewall restrictions.
Is CVE-1999-0017 still a relevant vulnerability today?
While CVE-1999-0017 is an older vulnerability, it remains relevant for legacy systems that still use vulnerable FTP servers.
- agent/type
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- vendor/gnu
- canonical/inet
- version/inet/5.01
- version/inet/6.01
- vendor/washington university
- canonical/wu-ftpd
- version/wu-ftpd/2.4
- version/inet/6.02
- vendor/sun
- canonical/sunos
- version/sunos/5.5
- vendor/ibm
- canonical/ibm aix
- version/ibm aix/4.3
- vendor/sco
- canonical/sco open desktop
- version/sco open desktop/3.0
- version/sunos/5.3
- vendor/caldera
- canonical/sco openlinux server
- version/sco openlinux server/1.2
- version/sunos/4.1.4
- version/ibm aix/4.2
- vendor/netbsd
- canonical/netbsd current
- version/netbsd current/1.2.1
- vendor/freebsd
- canonical/freebsd kernel
- version/freebsd kernel/2.1.7
- vendor/siemens
- canonical/siemens reliant unix
- version/netbsd current/1.0
- version/sunos/5.4
- canonical/xinuos unixware
- version/xinuos unixware/2.1
- version/freebsd kernel/1.0
- version/sunos/5.5.1
- version/freebsd kernel/1.1
- version/netbsd current/1.1
- version/freebsd kernel/2.1.0
- version/sunos/4.1.3u1
- version/ibm aix/4.1
- version/freebsd kernel/1.2
- version/ibm aix/3.2
- version/netbsd current/1.2
- canonical/sco openserver
- version/sco openserver/5.0.4
- version/freebsd kernel/2.0