VDB
GSD-2001-0550
GSD-2001-0550
PUBLISHED
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
Timeline
- Nov 27, 2001 CVE Published
- Feb 13, 2025 PoC Published
- Mar 28, 2025 PoC Published
- Apr 16, 2026 Distribution Patch
- Apr 16, 2026 Security Advisory
- Apr 16, 2026 Security Advisory
References
- SuSE-SA:2001:043 vendor-advisory
- wuftp-glob-heap-corruption(7611) vdb
- 20010430 some ftpd implementations mishandle CWD ~{ mailing-list
- CSSA-2001-041.0 vendor-advisory
- IMNX-2001-70-036-01 vendor-advisory
- RHSA-2001:157 vendor-advisory
- 3581 vdb
- 20011128 CORE-20011001: Wu-FTP glob heap corruption vulnerability mailing-list
- MDKSA-2001:090 vendor-advisory
- CLA-2001:442 vendor-advisory
- HPSBUX0107-162 vendor-advisory
- DSA-087 advisory
- VU#886083 advisory
- CA-2001-33 advisory