First published: Wed Oct 16 1996(Updated: )
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
wu-ftpd |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0075 is considered a high severity vulnerability due to the potential for remote code execution.
To fix CVE-1999-0075, upgrade to the latest version of the wu-ftpd software that has addressed this vulnerability.
CVE-1999-0075 affects installations of wu-ftpd that are configured to allow the QUOTE PASV command.
Exploitation of CVE-1999-0075 can lead to the disclosure of sensitive information or remote execution of arbitrary code.
A possible workaround for CVE-1999-0075 is to disable the PASV command in the wu-ftpd configuration if upgrading is not immediately feasible.