WU
Product
Wu-ftpd
21
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Wu-ftpd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-0256 | – | May 2 | The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a… Affected: 2.6.1; 2.6.2 |
| CVE-2004-0148 | – | Apr 15 | wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home… Affected: 2.4.1; 2.4.2_beta2; 2.4.2_beta18; 2.4.2_beta18_vr4; 2.4.2_beta18_vr5; 2.4.2_beta18_vr6; +15 more |
| CVE-2004-0185 | – | Mar 15 | Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code… Affected: 2.6.2 |
| CVE-2003-1327 | – | Dec 31 | Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow… Affected: through 2.6.2 |
| CVE-2003-1329 | – | Dec 31 | ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which… Affected: 2.6.2 |
| CVE-2003-0853 | – | Nov 17 | An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be… Affected: 2.4.1; 2.4.2_beta2; 2.4.2_beta18; 2.4.2_beta18_vr4; 2.4.2_beta18_vr5; 2.4.2_beta18_vr6; +15 more |
| CVE-2003-0854 | – | Nov 17 | ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use… Affected: 2.4.1; 2.4.2_beta2; 2.4.2_beta18; 2.4.2_beta18_vr4; 2.4.2_beta18_vr5; 2.4.2_beta18_vr6; +15 more |
| CVE-2001-0550 | – | Nov 30 | wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob) Affected: 2.5.0; 2.6.0; 2.6.1 |
| CVE-2001-0935 | – | Nov 28 | Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550 Affected: 2.4; 2.6.0; 2.6.1 |
| CVE-2001-0187 | – | Mar 26 | Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that… Affected: 2.4.1; 2.4.2_beta9; 2.4.2_beta18; 2.4.2_beta18_vr4; 2.4.2_beta18_vr5; 2.4.2_beta18_vr6; +13 more |
| CVE-2000-0574 | – | Jul 7 | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called… Affected: 2.4.2_beta1; 2.4.2_beta18; 2.4.2_beta18_vr4; 2.4.2_beta18_vr5; 2.4.2_beta18_vr6; 2.4.2_beta18_vr7; +12 more |
| CVE-1999-0878 | – | Aug 22 | Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR Affected: 2.4.2_beta18_vr4; 2.4.2_beta18_vr5; 2.4.2_beta18_vr6; 2.4.2_beta18_vr8; 2.4.2_beta18_vr9; 2.4.2_beta18_vr10; +8 more |
| CVE-1999-0368 | – | Feb 9 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a Affected: 2.4.2_beta18; 2.4.2_beta18_vr9 |
| CVE-1999-0017 | – | Dec 10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce Affected: 2.4 |
| CVE-1999-0955 | – | Sep 23 | Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command Affected: 2.4.1 |
| CVE-1999-1326 | – | Jul 4 | wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled… Affected: 2.4 |
| CVE-1999-0076 | – | Jul 1 | Buffer overflow in wu-ftp from PASV command causes a core dump Affected: All versions, or not specified |
| CVE-1999-0156 | – | Jul 1 | wu-ftpd FTP daemon allows any user and password combination Affected: All versions, or not specified |
| CVE-1999-0081 | – | Jan 11 | wu-ftp allows files to be overwritten via the rnfr command Affected: All versions, or not specified |
| CVE-1999-0075 | – | Oct 16 | PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password Affected: All versions, or not specified |
| CVE-1999-0080 | – | Nov 30 | Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain… Affected: 2.4 |
Showing 21