CVE-1999-0080: Critical severity washington university wu-ftpd vulnerability
Certain configurations of wu-ftp FTP server 2.4 use a PATHEXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set the _PATH_EXECPATH setting in wu-ftpd configuration to a directory that does not contain dangerous commands (do not use /bin). Remove or relocate executable binaries from the configured exec path so remote 'site exec' cannot invoke system commands.
wu-ftpd _PATH_EXECPATH = do not point to /bin; point to a directory that does not contain system exec binaries - Configuration
Disable the 'site exec' command in wu-ftpd (or otherwise prevent remote authenticated users from invoking it) to eliminate the vector that allows gaining root via 'site exec'.
wu-ftpd site exec = disabled - Compensating control
Restrict access to the FTP service to trusted IP addresses and networks at the firewall/ACL level and limit which accounts are allowed to authenticate to the FTP server to reduce exposure until configuration changes are applied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0080?
CVE-1999-0080 is considered a critical vulnerability due to its potential to allow remote authenticated users to gain root access.
How do I fix CVE-1999-0080?
To fix CVE-1999-0080, reconfigure the wu-ftp FTP server to avoid using dangerous command paths in the _PATH_EXECPATH setting.
Which versions of wu-ftpd are affected by CVE-1999-0080?
CVE-1999-0080 specifically affects wu-ftpd version 2.4.
What is the risk associated with CVE-1999-0080?
The risk associated with CVE-1999-0080 includes unauthorized root access to the system by authenticated users.
Can CVE-1999-0080 be exploited remotely?
Yes, CVE-1999-0080 can be exploited remotely by authenticated users through the 'site exec' command.