10

CVE-2001-0187

Exploit

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Data is provided by the National Vulnerability Database (NVD)
Washington UniversityWu-ftpd Version2.4.1
Washington UniversityWu-ftpd Version2.4.2_beta9 Editionacadem
Washington UniversityWu-ftpd Version2.4.2_beta18 Editionacadem
Washington UniversityWu-ftpd Version2.4.2_beta18_vr4
Washington UniversityWu-ftpd Version2.4.2_beta18_vr5
Washington UniversityWu-ftpd Version2.4.2_beta18_vr6
Washington UniversityWu-ftpd Version2.4.2_beta18_vr7
Washington UniversityWu-ftpd Version2.4.2_beta18_vr8
Washington UniversityWu-ftpd Version2.4.2_beta18_vr9
Washington UniversityWu-ftpd Version2.4.2_beta18_vr10
Washington UniversityWu-ftpd Version2.4.2_beta18_vr11
Washington UniversityWu-ftpd Version2.4.2_beta18_vr12
Washington UniversityWu-ftpd Version2.4.2_beta18_vr13
Washington UniversityWu-ftpd Version2.4.2_beta18_vr14
Washington UniversityWu-ftpd Version2.4.2_beta18_vr15
Washington UniversityWu-ftpd Version2.4.2_vr16
Washington UniversityWu-ftpd Version2.4.2_vr17
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 8.09% 0.918
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C