Unscored severity · published Nov 30, 2001
CVE-2001-0550
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob)
–
CVSS
74.7%
EPSS
No
On KEV
Description
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
Exploitation
Is it being used?
Exploit prediction (EPSS)74.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FT
Ftpd-bsd · David Madore
0.3.2; 0.3.3 · source: NVD
WU
Wu-ftpd · Washington University
2.5.0; 2.6.0; 2.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0550
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0550
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000442
download.immunix.org
http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-036-01
marc.info
http://marc.info/?l=bugtraq&m=100700363414799&w=2
Patch
http://www.caldera.com/support/security/advisories/CSSA-2001-041.0.txt
Patch
http://www.cert.org/advisories/CA-2001-33.html
www.debian.org
http://www.debian.org/security/2001/dsa-087
More from Ftpd-bsd
–
CVE-2001-0053
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges