CVE-2001-0550: david_madore ftpd-bsd

EPSS trend

Probability

74.65%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

-0.11 pp

From 74.76% on 19-09-2026

19-09-202619-10-2026

EPSS score

74.65%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotelinuxVerified
WU-FTPD 2.6.1 - Remote Command Execution
Maturity: weaponized
exploit-databaseremoteunixVerified
WU-FTPD 2.6 - File Globbing Heap Corruption
Maturity: weaponized

References

14 links

www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.htmlVendor AdvisoryX Refsource SUSE
marc.info?l=bugtraq&m=100700363414799&w=2Mailing ListX Refsource BUGTRAQ
www.cert.org/advisories/CA-2001-33.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/7611VDB EntryX Refsource XF
www.linux-mandrake.com/en/security/2001/MDKSA-2001-090.php3Vendor AdvisoryX Refsource MANDRAKE
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000442Vendor AdvisoryX Refsource CONECTIVA
www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-162Vendor AdvisoryX Refsource HP
www.securityfocus.com/archive/82/180823Mailing ListX Refsource VULN DEV
www.caldera.com/support/security/advisories/CSSA-2001-041.0.txtVendor AdvisoryX Refsource CALDERAPatch
www.debian.org/security/2001/dsa-087Vendor AdvisoryX Refsource DEBIAN

Show all 14 references

download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-036-01Vendor AdvisoryX Refsource IMMUNIX
www.redhat.com/support/errata/RHSA-2001-157.htmlVendor AdvisoryX Refsource REDHATPatch
www.kb.cert.org/vuls/id/886083Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
www.securityfocus.com/bid/3581VDB EntryX Refsource BIDExploitPatchVendor Advisory

Related vulnerabilities

CVE-2003-1329washington_universitywu-ftpd1.27%19y ago21-05-2007 20:00ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service.CVE-2003-1327washington_universitywu-ftpd3.29%19y ago15-05-2007 10:00Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.CVE-2003-0854debiancoreutils+21.11%23y ago25-10-2003 04:00ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.CVE-2003-0853debiancoreutils+211.09%23y ago25-10-2003 04:00An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.CVE-2001-0935washington_universitywu-ftpd1.48%24y ago02-02-2002 05:00Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.CVE-2001-0053david_madoreftpd-bsd+217.93%25y ago07-05-2001 04:00One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

All vulnerabilities inftpd-bsd wu-ftpd

CVE-2001-0550: david_madore ftpd-bsd

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References