CVE-1999-1326
MediumExploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
The wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, leading to incorrect signal handling and allowing local and possibly remote attackers to read arbitrary files.
Risk Assessment
This vulnerability poses a risk of unauthorized access to files on the server, potentially leading to the exposure of sensitive data.
Recommendation
It is recommended to update the wu-ftpd server to the latest version that addresses this vulnerability and to review and restrict access to sensitive files.
Original NVD description (English source)
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files.