CVE Catalog
CVE-1999-0997
HighExploitation Probability (EPSS)
Very high risk6.22%
93th percentile - higher than 93% of all known CVEs
Summary
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Risk Assessment
An attacker can exploit this vulnerability to execute unauthorized commands on the server, potentially leading to serious security breaches.
Recommendation
It is recommended to disable FTP conversion in wu-ftp and to monitor and update the software to minimize risk.
Original NVD description (English source)
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.