CVE-1999-0075: Medium severity washington university wu-ftpd vulnerability
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable PASV/passive mode in wu-ftpd configuration to prevent processing of QUOTE PASV commands that can trigger a core dump.
wu-ftpd PASV (passive FTP) = disabled - Compensating control
Restrict access to the FTP service to trusted hosts or networks at the perimeter firewall or ACLs to reduce exposure to an attacker attempting to exploit the QUOTE PASV core-dump issue.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0075?
CVE-1999-0075 is considered a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-1999-0075?
To fix CVE-1999-0075, upgrade to the latest version of the wu-ftpd software that has addressed this vulnerability.
Who is affected by CVE-1999-0075?
CVE-1999-0075 affects installations of wu-ftpd that are configured to allow the QUOTE PASV command.
What are the potential impacts of exploiting CVE-1999-0075?
Exploitation of CVE-1999-0075 can lead to the disclosure of sensitive information or remote execution of arbitrary code.
Is there a workaround for CVE-1999-0075?
A possible workaround for CVE-1999-0075 is to disable the PASV command in the wu-ftpd configuration if upgrading is not immediately feasible.