CVEvulnerability

CVE-1999-0017

7.5 HIGH Published 1997-12-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1997-12-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Affected configurations

• gnu inet 5.01 • gnu inet 6.01 • gnu inet 6.02 • washington university wu-ftpd 2.4 • caldera openlinux 1.2 • freebsd freebsd 1.0 • freebsd freebsd 1.1 • freebsd freebsd 1.2 • freebsd freebsd 2.0 • freebsd freebsd 2.1.0 • freebsd freebsd 2.1.7 • ibm aix 3.2 • ibm aix 4.1 • ibm aix 4.2 • ibm aix 4.3 • netbsd netbsd 1.0 • netbsd netbsd 1.1 • netbsd netbsd 1.2 • netbsd netbsd 1.2.1 • sco open desktop 3.0 • sco openserver 5.0.4 • sco unixware 2.1 • siemens reliant unix • sun sunos 4.1.3u1 • sun sunos 4.1.4 • sun sunos 5.3 • sun sunos 5.4 • sun sunos 5.5 • sun sunos 5.5.1

Related

Referenced by CWE · observed example (1)

  • CWE-441 Unintended Proxy or Intermediary weakness

References