CVE-2001-0187

no score yetEPSS 5.7%

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

EPSS: 5.7% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2001-03-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

washington_university:wu-ftpd

References

ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/missing_format_strings.patch
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000443
http://www.debian.org/security/2001/dsa-016
http://www.securityfocus.com/bid/2296
https://exchange.xforce.ibmcloud.com/vulnerabilities/6020

Check your stack JSON