CVE-2001-0187: Critical severity Washington University Wu-ftpd vulnerability

Published Mar 26, 2001
·
Updated

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Affected Software

19 affected components
Washington University Wu-ftpd=2.4.1
Washington University Wu-ftpd=2.4.2_beta9
Washington University Wu-ftpd=2.4.2_beta18
Washington University Wu-ftpd=2.4.2_beta18_vr4
Washington University Wu-ftpd=2.4.2_beta18_vr5
Washington University Wu-ftpd=2.4.2_beta18_vr6
Washington University Wu-ftpd=2.4.2_beta18_vr7
Washington University Wu-ftpd=2.4.2_beta18_vr8
Washington University Wu-ftpd=2.4.2_beta18_vr9
Washington University Wu-ftpd=2.4.2_beta18_vr10
Washington University Wu-ftpd=2.4.2_beta18_vr11
Washington University Wu-ftpd=2.4.2_beta18_vr12
Washington University Wu-ftpd=2.4.2_beta18_vr13
Washington University Wu-ftpd=2.4.2_beta18_vr14
Washington University Wu-ftpd=2.4.2_beta18_vr15
Washington University Wu-ftpd=2.4.2_vr16
Washington University Wu-ftpd=2.4.2_vr17
Washington University Wu-ftpd=2.5
Washington University Wu-ftpd=2.6

Remediation

Patch Available

http://www.securityfocus.com/bid/2296

Event History

Mar 26, 2001
CVE Published
05:00 AM
May 7, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2001-0187?

CVE-2001-0187 has a severity rating of high due to the ability for remote attackers to execute arbitrary commands.

2

How do I fix CVE-2001-0187?

To fix CVE-2001-0187, upgrade to a version of wu-ftp later than 2.6.1 that no longer operates with debug mode in a vulnerable manner.

3

What versions of wu-ftp are affected by CVE-2001-0187?

CVE-2001-0187 affects wu-ftp versions 2.6.1 and earlier, particularly those running with debug mode enabled.

4

What type of vulnerability is CVE-2001-0187?

CVE-2001-0187 is a format string vulnerability.

5

Can CVE-2001-0187 be exploited remotely?

Yes, CVE-2001-0187 can be exploited remotely by attackers using malformed arguments.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203