CVE-1999-0997

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Dec 20, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0997 is a vulnerability affecting wu-ftp servers with the FTP conversion feature enabled. Maliciously crafted file names can be used to execute arbitrary commands on the server, bypassing the FTP environment. The issue arises when the program handling the file conversion (such as tar or uncompress) interprets the malformed file name as an argument, allowing command execution. This vulnerability poses a significant risk, as it can lead to unauthorized system access and data manipulation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Red Hat Enterprise Linux

Affected Vendors

  • Red Hat