cve.bz

washington university wu-ftpd vulnerabilities, newest first

Filter
  1. –CVE-2005-0256EPSS 5.2%

    The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using …

  2. –CVE-2004-0148EPSS 0.4%

    wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory inste…

  3. –CVE-2004-0185EPSS 7.4%

    Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

  4. –CVE-2003-1329EPSS 1.3%

    ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service.

  5. –CVE-2003-1327EPSS 3.3%

    Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading …

  6. –CVE-2003-0854EPSS 1.1%

    ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

  7. –CVE-2003-0853EPSS 11%

    An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-…

  8. –CVE-2001-0550EPSS 74%

    wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).

  9. –CVE-2001-0935EPSS 1.5%

    Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.

  10. –CVE-2001-0187EPSS 5.7%

    Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

  11. –CVE-2000-0574EPSS 59%

    FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a …

  12. –CVE-1999-0878EPSS 2.2%

    Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.

  13. –CVE-1999-0368EPSS 40%

    Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

  14. –CVE-1999-0017EPSS 2.0%

    FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

  15. –CVE-1999-0955EPSS 2.5%

    Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.

  16. –CVE-1999-1326EPSS 1.5%

    wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read …

  17. –CVE-1999-0156EPSS 0.4%

    wu-ftpd FTP daemon allows any user and password combination.

  18. –CVE-1999-0076EPSS 1.7%

    Buffer overflow in wu-ftp from PASV command causes a core dump.

  19. –CVE-1999-0081EPSS 1.6%

    wu-ftp allows files to be overwritten via the rnfr command.

  20. –CVE-1999-0075EPSS 1.6%

    PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.

  21. –CVE-1999-0080EPSS 4.0%

    Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.