CVE-1999-0076: Buffer Overflow
Buffer overflow in wu-ftp from PASV command causes a core dump.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
wu-ftpdfrom your environment.Uninstall or stop running wu-ftpd until a vendor-supplied fix or patched version is available.
- Configuration
Disable handling of the PASV command (passive FTP/passive mode) in the wu-ftpd configuration so the server does not process PASV requests that can trigger the buffer overflow.
wu-ftpd PASV (PASV command / passive mode) support = disabled - Compensating control
Restrict access to the FTP service at the network boundary: block or limit port 21 and passive-data ports to trusted IPs only (firewall/ACL) and disable or filter PASV connections where possible to reduce exposure to the vulnerable PASV handling.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0076?
CVE-1999-0076 is considered a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-1999-0076?
To fix CVE-1999-0076, users should upgrade to a patched version of wu-ftpd that addresses this buffer overflow issue.
What impact does CVE-1999-0076 have on systems?
CVE-1999-0076 can allow attackers to trigger a buffer overflow, leading to system crashes and potential unauthorized access.
Which versions of wu-ftpd are affected by CVE-1999-0076?
CVE-1999-0076 affects all versions of wu-ftpd prior to the security patch that addresses the buffer overflow in the PASV command.
Is CVE-1999-0076 still a concern for modern systems?
While CVE-1999-0076 is an older vulnerability, systems using outdated versions of wu-ftpd remain at risk if not updated.