CVE-1999-0156
MediumExploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
The wu-ftpd FTP daemon allows any user and password combination.
Risk Assessment
This poses a serious risk of unauthorized access to the system, potentially leading to data loss or security breaches.
Recommendation
It is recommended to update or configure FTP daemons to enforce strong passwords and restrict access.
Other vulnerabilities in wu-ftpd
See all- CVE-1999-0880Medium
CVE-1999-0880 affects WU-FTPD, where the SITE NEWER command improperly manages memory, leading to a denial of service.
- CVE-1999-1326Medium
The wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, leading to incorrect signal handling and allowing local and possibly remote attackers to read arbitrary files.
- CVE-1999-0075Medium
CVE-1999-0075 vulnerability affects the wu-ftpd daemon, which generates a core dump in response to a QUOTE PASV command after an attacker specifies a username and password.
Original NVD description (English source)
wu-ftpd FTP daemon allows any user and password combination.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS