CVE-1999-0202: High severity University of Washington Wu-ftpd vulnerability
The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
wu-ftpdfrom your environment.Uninstall wu-ftpd or stop/disable the FTP service until a fixed version or patch is available.
- Compensating control
Restrict or block access to the FTP service (wu-ftpd) at the network perimeter or via firewall/ACLs until a fix is available (e.g., allow only trusted IPs or disable FTP access).
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0202?
CVE-1999-0202 is considered a high-severity vulnerability as it allows arbitrary command execution on the system during FTP sessions.
How do I fix CVE-1999-0202?
To fix CVE-1999-0202, upgrade the wu-ftpd to version 2.4.2 or later, which addresses this security issue.
What vulnerability does CVE-1999-0202 exploit?
CVE-1999-0202 exploits a flaw in the GNU tar command used within FTP sessions that can lead to unauthorized command execution.
Which versions of wu-ftpd are affected by CVE-1999-0202?
CVE-1999-0202 affects wu-ftpd version 2.4.1, allowing potential attacks during FTP session handling.
Can CVE-1999-0202 be mitigated without an upgrade?
Mitigation of CVE-1999-0202 without an upgrade is difficult, but limiting FTP access or using alternative secure file transfer methods can reduce risk.