CVE Catalog

CVE-1999-1539

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
11.86%

96th percentile - higher than 96% of all known CVEs

Summary

Buffer overflow in the FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long user name or password.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the FTP server's operation and gain unauthorized access to the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update the software to the latest version that addresses this vulnerability and to monitor the FTP server logs for potential attack attempts.

Original NVD description (English source)

Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS