Washington University vulnerabilities
17 vulnerabilities
Known vulnerabilities in Washington University products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Wu Ftpd17 vulnerabilities
CVE-2003-1329washington_universitywu-ftpd
EPSS score1.27%
ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service.CVE-2003-1327washington_universitywu-ftpdEPSS score3.29%
Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.CVE-2003-0854debiancoreutils+2EPSS score1.11%
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.CVE-2003-0853debiancoreutils+2EPSS score11.09%
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.CVE-2001-0935washington_universitywu-ftpdEPSS score1.48%
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.CVE-2001-0550david_madoreftpd-bsd+1EPSS score74.65%
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).CVE-2001-0187washington_universitywu-ftpdEPSS score5.67%
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.CVE-2005-0256debianwu-ftpd+1EPSS score5.21%
The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.CVE-2000-0574openbsdftpd+1EPSS score58.87%
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.CVE-1999-1326washington_universitywu-ftpdEPSS score1.52%
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files.CVE-1999-0017calderaopenlinux+9EPSS score1.98%
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.CVE-1999-0080washington_universitywu-ftpdEPSS score3.97%
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.CVE-1999-0368calderaopenlinux+7EPSS score39.84%
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.CVE-1999-0955washington_universitywu-ftpdEPSS score2.50%
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.CVE-1999-0878beroftpdberoftpd+1EPSS score2.22%
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.CVE-2004-0148sgipropack+1EPSS score0.44%
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.CVE-2004-0185washington_universitywu-ftpdEPSS score7.45%
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.