wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.debian.org/security/2003/dsa-377 | 
Configurations
                    Configuration 1 (hide)
| 
 | 
Configuration 2 (hide)
| 
 | 
Information
                Published : 1999-12-19 21:00
Updated : 2008-09-05 13:18
NVD link : CVE-1999-0997
Mitre link : CVE-1999-0997
JSON object : View
CWE
                Products Affected
                redhat
- linux
millenux_gmbh
- anonftp
university_of_washington
- wu-ftpd


