CVE-1999-1058

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Nov 22, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-1058 is a buffer overflow vulnerability affecting version 1.23 of Vermillion FTP Daemon VFTPD. This issue allows remote attackers to cause a denial of service by sending overly long CWD (Change Working Directory) commands. Additionally, successful exploitation may grant attackers the ability to execute arbitrary commands, posing a significant security risk. To mitigate this vulnerability, affected systems should be updated to the latest version of VFTPD or have proper input validation measures in place for CWD commands.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share