## Description

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### millenux_gmbh - anonftp

Affected Versions:

- 2.8.1

### university_of_washington - wu-ftpd

Affected Versions:

- 2.4.2

### university_of_washington - wu-ftpd

Affected Versions:

- 2.5.0

### university_of_washington - wu-ftpd

Affected Versions:

- 2.6.0

### redhat - linux

Affected Versions:

- 5.2

### redhat - linux

Affected Versions:

- 6.0

### redhat - linux

Affected Versions:

- 6.1

## References

- http://www.debian.org/security/2003/dsa-377
- http://www.debian.org/security/2003/dsa-377

Neural Processor Active