wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
References
Link | Resource |
---|---|
http://www.debian.org/security/2003/dsa-377 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 1999-12-19 21:00
Updated : 2008-09-05 13:18
NVD link : CVE-1999-0997
Mitre link : CVE-1999-0997
JSON object : View
CWE
Products Affected
redhat
- linux
millenux_gmbh
- anonftp
university_of_washington
- wu-ftpd