CVE-1999-0997 - CVE Details

Description

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.

Severity

Overall Severity: N/A

CVSS Metrics

Type	Score	Severity	Vector

Affected Products

millenux_gmbh - anonftp

Affected Versions:

2.8.1

university_of_washington - wu-ftpd

Affected Versions:

2.4.2

university_of_washington - wu-ftpd

Affected Versions:

2.5.0

university_of_washington - wu-ftpd

Affected Versions:

2.6.0

redhat - linux

Affected Versions:

redhat - linux

Affected Versions:

redhat - linux

Affected Versions:

References

http://www.debian.org/security/2003/dsa-377
http://www.debian.org/security/2003/dsa-377