CVE-1999-0256: Buffer Overflow
Buffer overflow in War FTP allows remote execution of commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
War FTPfrom your environment.Uninstall War FTP from affected hosts if it is not required.
- Configuration
Stop the War FTP service and disable it from starting automatically until a vendor patch or fixed version is available.
War FTP service_enabled = false - Compensating control
Restrict or block network access to the FTP service (e.g., port 21 and related ports) using host-based firewall rules, network ACLs, or perimeter firewalls so only trusted management hosts can reach it.
- Operational
Monitor hosts for signs of exploitation (unexpected processes, command execution, or anomalous network traffic). If compromise is suspected, isolate affected systems, perform incident response, and remediate before returning to production.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0256?
CVE-1999-0256 is considered a critical vulnerability due to its potential for remote command execution.
How do I fix CVE-1999-0256?
To fix CVE-1999-0256, upgrade War FTP to version 1.67 or later.
What systems are affected by CVE-1999-0256?
CVE-1999-0256 affects War FTP versions up to 1.66 running on Microsoft Windows 95 and Windows NT.
What are the risks associated with CVE-1999-0256?
The risks include unauthorized remote commands being executed on affected systems, leading to potential data breaches.
Is there a workaround for CVE-1999-0256 if upgrading is not possible?
Temporary workarounds include disabling the FTP service until the software can be upgraded to mitigate the vulnerability.