CVE Catalog

CVE-1999-0079

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.23%

80th percentile - higher than 80% of all known CVEs

Summary

Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.

Risk Assessment

This attack can lead to the unavailability of the FTP service, affecting the organization's operations and potentially disrupting data transfers.

Recommendation

It is recommended to monitor and limit the number of PASV commands to prevent port exhaustion and implement mechanisms to protect against DoS attacks.

Original NVD description (English source)

Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS