CVE-1999-0082: Critical severity FTP FTP vulnerability
CWD ~root command in ftpd allows root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Ftpcdfrom your environment.Uninstall Ftpcd (ftpd) if the FTP service is not required to eliminate the vulnerable component.
- Configuration
Disable or block the CWD ~root command in the FTP daemon (ftpd/Ftpcd) to prevent escalation to root.
ftpd (Ftpcd) CWD ~root command = disabled - Compensating control
Until a patch or permanent mitigation is available, restrict access to the FTP service (ftpd/Ftpcd) to trusted IPs or block the service at the network perimeter/firewall.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0082?
CVE-1999-0082 is considered to have a high severity due to the potential for unauthorized root access.
How do I fix CVE-1999-0082?
To fix CVE-1999-0082, you should upgrade to the latest version of the affected FTP software that addresses this vulnerability.
What does CVE-1999-0082 exploit?
CVE-1999-0082 exploits a weakness in the CWD ~root command in ftpd, allowing attackers to gain root access.
Which software is affected by CVE-1999-0082?
CVE-1999-0082 affects various FTP software, including FTP and Ftpcd implementations.
Is CVE-1999-0082 still a concern today?
While CVE-1999-0082 pertains to older FTP implementations, it can still pose a concern for legacy systems that are not updated.