Vulnerability in Millenux Gmbh Anonftp

CVE-1999-0997

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.

EPSS: 0.062 (92.8th percentile) — read the EPSS interpretation.

Affected products

Millenux_gmbh Anonftp — versions 2.8.1
University_of_washington Wu-ftpd — versions 2.4.2, 2.5.0, 2.6.0
Redhat Linux — versions 5.2, 6.0, 6.1
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)