CVE Catalog

CVE-1999-0083

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
1.76%

75th percentile - higher than 75% of all known CVEs

Summary

A file descriptor leak in the getcwd() function in FTP has been detected, which may lead to the disclosure of directory path information.

Risk Assessment

Organizations may be exposed to the disclosure of sensitive information about the file system structure, potentially facilitating attacks.

Recommendation

It is recommended to update the FTP software and monitor and restrict access to the getcwd() function.

Original NVD description (English source)

getcwd() file descriptor leak in FTP.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS