GCVE-110-CERTCC-2001-639760

Advisory Published

Vulnetix · Advisory published January 23, 2001

WU-FTPD contains a format string vulnerability that manifests when WU-FTPD is configured to use RFC 931 authentication and is run in debug mode. A crafted identd response could be used to execute arbitrary code on a vulnerable server.

Download JSON Open in Console

Risk Scores

certcc-cam

impact19population8exploitation0widely_known15score_current14.592ease_of_exploitation10

Aliases

CVE-2001-0187

References

WU-FTPD configured to use RFC 931 authentication running in debug mode contains format string vulnerability

advisory

WU-FTPD configured to use RFC 931 authentication running in debug mode contains format string vulnerability

url

WU-FTPD configured to use RFC 931 authentication running in debug mode contains format string vulnerability

url

WU-FTPD configured to use RFC 931 authentication running in debug mode contains format string vulnerability

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON