CVE-1999-0075
MediumExploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
CVE-1999-0075 vulnerability affects the wu-ftpd daemon, which generates a core dump in response to a QUOTE PASV command after an attacker specifies a username and password.
Risk Assessment
An attacker could exploit this vulnerability to remotely trigger a core dump, potentially leading to the disclosure of sensitive information or destabilization of the FTP server.
Recommendation
It is recommended to update the wu-ftpd daemon to the latest version that addresses this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in wu-ftpd
See all- CVE-1999-0880Medium
CVE-1999-0880 affects WU-FTPD, where the SITE NEWER command improperly manages memory, leading to a denial of service.
- CVE-1999-1326Medium
The wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, leading to incorrect signal handling and allowing local and possibly remote attackers to read arbitrary files.
- CVE-1999-0156Medium
The wu-ftpd FTP daemon allows any user and password combination.
Original NVD description (English source)
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS