Unscored severity · published Dec 10, 1997
CVE-1999-0017
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce
–
CVSS
2%
EPSS
No
On KEV
Description
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
3.2; 4.1; 4.2; 4.3 · source: NVD
FR
Freebsd · Freebsd
1.0; 1.1; 1.2; 2.0; 2.1.0; 2.1.7 · source: NVD
IN
Inet · Gnu
5.01; 6.01; 6.02 · source: NVD
NE
Netbsd · Netbsd
1.0; 1.1; 1.2; 1.2.1 · source: NVD
OD
Open Desktop · Sco
3.0 · source: NVD
OP
Openlinux · Caldera
1.2 · source: NVD
OP
Openserver · Sco
5.0.4 · source: NVD
RU
Reliant Unix · Siemens
All versions, or not specified · source: NVD
SU
Sunos · Sun
4.1.3u1; 4.1.4; 5.3; 5.4; 5.4; 5.5; +3 more · source: NVD
UN
Unixware · Sco
2.1 · source: NVD
WU
Wu-ftpd · Washington University
2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0017
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0017
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017
More from Openlinux
9.8
CVE-1999-0043
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others
–
CVE-2002-1199
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on…
–
CVE-2001-0851
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie
–
CVE-2001-0850
A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit…
–
CVE-2000-0892
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the…