CVE-1999-1003: Medium severity Jgaa Warftpd vulnerability
War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
War FTP Daemon (warftpd)from your environment.Uninstall War FTP Daemon if the service is not required in order to eliminate exposure to the connection-flooding denial-of-service issue.
- Configuration
Stop and disable the War FTP Daemon service until a vendor fix is available to prevent remote connection-flooding denial-of-service.
War FTP Daemon service_enabled = false - Compensating control
Restrict external access to the War FTP Daemon (FTP port 21) with firewall rules or network ACLs to only trusted IP addresses; deploy connection-rate limiting or an IPS/WAF to detect and block connection-flooding attempts.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1003?
CVE-1999-1003 has a medium severity rating as it allows denial of service attacks that affect the availability of the service.
How do I fix CVE-1999-1003?
To mitigate CVE-1999-1003, consider upgrading to a fixed version of War FTP Daemon or implementing firewall rules to limit the number of concurrent connections.
What type of attack is CVE-1999-1003 associated with?
CVE-1999-1003 is associated with denial of service attacks caused by connection flooding.
Which version of War FTP Daemon is affected by CVE-1999-1003?
War FTP Daemon version 1.70 is affected by CVE-1999-1003.
Can CVE-1999-1003 be exploited remotely?
Yes, CVE-1999-1003 can be exploited remotely by attackers flooding the FTP server with connections.