CVE-1999-0368: Buffer Overflow

Published Feb 9, 1999

Updated

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

Affected Software

17 affected components

Proftpd Project Proftpd=1.2_pre1

Washington University Wu-ftpd=2.4.2_beta18

Washington University Wu-ftpd=2.4.2_beta18_vr9

Caldera OpenLinux=1.3

Debian Debian Linux=2.0

redhat Linux=5.0

redhat Linux=5.1

SCO OpenServer=5.0

SCO OpenServer=5.0.2

SCO OpenServer=5.0.3

SCO OpenServer=5.0.4

SCO OpenServer=5.0.5

SCO UnixWare=7.0

SCO UnixWare=7.0.1

Slackware Slackware Linux=3.4

Slackware Slackware Linux=3.5

Slackware Slackware Linux=3.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove wu-ftpd from your environment.
Uninstall wu-ftpd if the service is not required or replace it with a secure alternative.
Remove
Remove ProFTPD from your environment.
Uninstall ProFTPD if the service is not required or replace it with a secure alternative.
Configuration
Stop and disable the wu-ftpd FTP service until a fixed version or official patch is available.
wu-ftpd (wuarchive ftpd) service_enabled = false
Configuration
Stop and disable the ProFTPD service until a fixed version or official patch is available.
ProFTPD service_enabled = false
Compensating control
Restrict network access to FTP services (for example, block TCP port 21 and related ports) and limit access to trusted hosts via firewall/ACLs until the software is removed or a patch is applied.
Operational
Treat exposed systems as potentially compromised (the vulnerabilities allow remote root access); perform incident investigation and remediation, and rotate credentials and keys that may have been exposed.

Event History

Feb 9, 1999

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Sep 29, 1999

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-0368?

CVE-1999-0368 has been classified as a critical vulnerability due to its potential to provide remote root access.

How do I fix CVE-1999-0368?

To remediate CVE-1999-0368, upgrade to the latest stable versions of wu-ftpd and ProFTPD that address this buffer overflow vulnerability.

What software versions are affected by CVE-1999-0368?

CVE-1999-0368 affects specific versions of wu-ftpd 2.4.2 beta and ProFTPD 1.2 pre1, among others.

What is the impact of CVE-1999-0368?

The impact of CVE-1999-0368 includes the risk of unauthorized remote root access, which can lead to system compromise.

Is CVE-1999-0368 still relevant today?

While CVE-1999-0368 is an older vulnerability, it remains relevant for legacy systems still running the affected software versions.