CVE-1999-0880

Summary

CVE-1999-0880 is a denial-of-service vulnerability affecting WU-FTPD servers. The issue arises from the SITE NEWER command, which fails to free memory properly. An attacker can exploit this by sending specially crafted commands, leading to a memory leak and eventual server crash. This may result in a denial-of-service condition, rendering the FTP server unavailable to legitimate users. It is recommended that affected systems be updated to a patched version of WU-FTPD to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.