Washington University
Washington University Wu-ftpd: vulnerabilidades y CVE
Washington University Wu-ftpd tiene 21 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE21
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2005-0256 | Media (5) | 5.2% | — | 2 may 2005 | The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as… |
| CVE-2004-0148 | Alta (7.2) | 0.44% | — | 15 abr 2004 | wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the… |
| CVE-2004-0185 | Alta (10) | 7.4% | — | 15 mar 2004 | Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long… |
| CVE-2003-1327 | Alta (9.3) | 3.3% | — | 31 dic 2003 | Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute… |
| CVE-2003-1329 | Alta (7.8) | 1.3% | — | 31 dic 2003 | ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial… |
| CVE-2003-0853 | Media (5) | 11% | — | 17 nov 2003 | An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that… |
| CVE-2003-0854 | Baja (2.1) | 1.1% | — | 17 nov 2003 | ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd. |
| CVE-2001-0550 | Alta (7.5) | 75% | — | 30 nov 2001 | wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob). |
| CVE-2001-0935 | Alta (7.5) | 1.5% | — | 28 nov 2001 | Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550. |
| CVE-2001-0187 | Alta (10) | 5.7% | — | 26 mar 2001 | Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment. |
| CVE-2000-0574 | Media (5) | 59% | — | 7 jul 2000 | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote… |
| CVE-1999-0878 | Alta (10) | 2.2% | — | 22 ago 1999 | Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR. |
| CVE-1999-0368 | Alta (10) | 40% | — | 9 feb 1999 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. |
| CVE-1999-0017 | Alta (7.5) | 2.0% | — | 10 dic 1997 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. |
| CVE-1999-0955 | Alta (7.6) | 2.5% | — | 23 sept 1997 | Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command. |
| CVE-1999-1326 | Media (5) | 1.5% | — | 4 jul 1997 | wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly… |
| CVE-1999-0156 | Media (4.6) | 0.40% | — | 1 jul 1997 | wu-ftpd FTP daemon allows any user and password combination. |
| CVE-1999-0076 | Media (5) | 1.7% | — | 1 jul 1997 | Buffer overflow in wu-ftp from PASV command causes a core dump. |
| CVE-1999-0081 | Media (5) | 1.6% | — | 11 ene 1997 | wu-ftp allows files to be overwritten via the rnfr command. |
| CVE-1999-0075 | Media (5) | 1.6% | — | 16 oct 1996 | PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password. |
| CVE-1999-0080 | Alta (10) | 4.0% | — | 30 nov 1995 | Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command. |