Vulnerability in Washington_university Wu-ftpd

CVE-2001-0187

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

EPSS: 0.057 (92.1th percentile) — read the EPSS interpretation.

Affected products

Washington_university Wu-ftpd — versions 2.4.1, 2.4.2_beta9, 2.4.2_beta18
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)