CVE

Id
3008  
CVE No.
CVE-2001-0187  
Status
Entry  
Description
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
12448 3008 CVE-2001-0187 DEBIAN:DSA-016  View
12449 3008 CVE-2001-0187 URL:http://www.debian.org/security/2001/dsa-016  View
12450 3008 CVE-2001-0187 CONFIRM:ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/missing_format_strings.patch  View
12451 3008 CVE-2001-0187 CONECTIVA:CLA-2001:443  View
12452 3008 CVE-2001-0187 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000443  View
12453 3008 CVE-2001-0187 BID:2296  View
12454 3008 CVE-2001-0187 URL:http://www.securityfocus.com/bid/2296  View
12455 3008 CVE-2001-0187 XF:wuftp-debug-format-string  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64035 JVNDB-2001-000009 WＵ-FTPD のデバッグモードにおけるフォーマットストリングの脆弱性 RFC 931 に準拠した認証を有効にして、デバッグモードで動作している WU-FTPD には、フォーマットストリングの脆弱性が存在します。 CVE-2001-0187 3008 10 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000009.html  View