ID CVE-2001-0550
Summary wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
References
Vulnerable Configurations
  • cpe:2.3:a:david_madore:ftpd-bsd:0.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:david_madore:ftpd-bsd:0.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:david_madore:ftpd-bsd:0.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:david_madore:ftpd-bsd:0.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 03-05-2018 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
rhsa
id RHSA-2001:157
refmap via4
bid 3581
bugtraq 20011128 CORE-20011001: Wu-FTP glob heap corruption vulnerability
caldera
  • CSSA-2001-041.0
  • CSSA-2001-SCO.36
  • CSSA-2002-SCO.1
cert CA-2001-33
cert-vn VU#886083
conectiva CLA-2001:442
debian DSA-087
hp HPSBUX0107-162
immunix IMNX-2001-70-036-01
iss 20011129 WU-FTPD Heap Corruption Vulnerability
mandrake MDKSA-2001:090
suse SuSE-SA:2001:043
vuln-dev 20010430 some ftpd implementations mishandle CWD ~{
xf wuftp-glob-heap-corruption(7611)
Last major update 03-05-2018 - 01:29
Published 30-11-2001 - 05:00
Back to Top