Skip to content

CVE-2001-0187 Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV...

HighCVSS 10.0 EPSS 5.7% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Affected products

ProductAffected versionsFixed in
washington university wu-ftpd = 2.4.1 No fix listed
washington university wu-ftpd = 2.4.2_beta9 No fix listed
washington university wu-ftpd = 2.4.2_beta18 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr4 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr5 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr6 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr7 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr8 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr9 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr10 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr11 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr12 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr13 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr14 No fix listed
washington university wu-ftpd = 2.4.2_beta18_vr15 No fix listed
washington university wu-ftpd = 2.4.2_vr16 No fix listed
washington university wu-ftpd = 2.4.2_vr17 No fix listed
washington university wu-ftpd = 2.5 No fix listed
washington university wu-ftpd = 2.6 No fix listed

References