CVEvulnerability

CVE-2001-0187

10.0 HIGH Published 2001-03-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-03-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Affected configurations

• washington university wu-ftpd 2.4.1 • washington university wu-ftpd 2.4.2 beta9 • washington university wu-ftpd 2.4.2 beta18 • washington university wu-ftpd 2.4.2 beta18 vr4 • washington university wu-ftpd 2.4.2 beta18 vr5 • washington university wu-ftpd 2.4.2 beta18 vr6 • washington university wu-ftpd 2.4.2 beta18 vr7 • washington university wu-ftpd 2.4.2 beta18 vr8 • washington university wu-ftpd 2.4.2 beta18 vr9 • washington university wu-ftpd 2.4.2 beta18 vr10 • washington university wu-ftpd 2.4.2 beta18 vr11 • washington university wu-ftpd 2.4.2 beta18 vr12 • washington university wu-ftpd 2.4.2 beta18 vr13 • washington university wu-ftpd 2.4.2 beta18 vr14 • washington university wu-ftpd 2.4.2 beta18 vr15 • washington university wu-ftpd 2.4.2 vr16 • washington university wu-ftpd 2.4.2 vr17 • washington university wu-ftpd 2.5 • washington university wu-ftpd 2.6

References