CVE Catalog

CVE-1999-0075

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.57%

72th percentile - higher than 72% of all known CVEs

Summary

CVE-1999-0075 vulnerability affects the wu-ftpd daemon, which generates a core dump in response to a QUOTE PASV command after an attacker specifies a username and password.

Risk Assessment

An attacker could exploit this vulnerability to remotely trigger a core dump, potentially leading to the disclosure of sensitive information or destabilization of the FTP server.

Recommendation

It is recommended to update the wu-ftpd daemon to the latest version that addresses this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS