CVE-1999-0880
MediumExploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
CVE-1999-0880 affects WU-FTPD, where the SITE NEWER command improperly manages memory, leading to a denial of service.
Risk Assessment
An attacker can exploit this vulnerability to disrupt the FTP service, potentially causing downtime in data access.
Recommendation
It is recommended to update WU-FTPD to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in WU-FTPD
See all- CVE-1999-1326Medium
The wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, leading to incorrect signal handling and allowing local and possibly remote attackers to read arbitrary files.
- CVE-1999-0156Medium
The wu-ftpd FTP daemon allows any user and password combination.
- CVE-1999-0075Medium
CVE-1999-0075 vulnerability affects the wu-ftpd daemon, which generates a core dump in response to a QUOTE PASV command after an attacker specifies a username and password.
Original NVD description (English source)
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS