Unscored severity · published Dec 20, 1999
CVE-1999-0997
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g
–
CVSS
6.2%
EPSS
No
On KEV
Description
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.2% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Anonftp · Millenux Gmbh
2.8.1 · source: NVD
LI
Linux · Redhat
5.2; 6.0; 6.1 · source: NVD
WU
Wu-ftpd · University OF Washington
2.4.2; 2.5.0; 2.6.0 · source: NVD