CVE-1999-0156: Medium severity washington university wu-ftpd vulnerability
wu-ftpd FTP daemon allows any user and password combination.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
wu-ftpdfrom your environment.Uninstall wu-ftpd if the FTP service is not required on the system to eliminate the vulnerable component.
- Configuration
Configure wu-ftpd to perform proper credential validation; disable any insecure authentication mode that accepts any credentials and ensure the server verifies usernames and passwords before granting access.
wu-ftpd authentication = require valid username and password - Compensating control
Restrict network access to the FTP service using firewall rules, ACLs, or a reverse proxy/WAF so only trusted management IPs or networks can connect until the issue is resolved.
- Operational
Rotate FTP account passwords and any shared or privileged credentials that may have been accepted or exposed due to the vulnerability; review access logs for unauthorized logins and disable or remove any suspicious accounts.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0156?
CVE-1999-0156 is considered a critical vulnerability due to its ability to allow unauthorized access to the FTP server.
How does CVE-1999-0156 impact wu-ftpd?
CVE-1999-0156 allows any user to gain access to the wu-ftpd service regardless of the username or password provided.
How do I fix CVE-1999-0156?
To mitigate CVE-1999-0156, upgrade to a patched version of wu-ftpd that resolves the unauthorized access issue.
Which versions of wu-ftpd are affected by CVE-1999-0156?
CVE-1999-0156 affects all versions of the wu-ftpd FTP daemon prior to the release that includes the fix for this vulnerability.
Is there a workaround for CVE-1999-0156?
A temporary workaround for CVE-1999-0156 includes disabling the wu-ftpd service until a secure version is installed.