CVSS: 10.0EPSS: 11%CPEs: 19EXPL: 2CVE-2001-0187 – WU-FTPD 2.4.2/2.5/2.6 - Debug Mode Client Hostname Format String
https://notcve.org/view.php?id=CVE-2001-0187
26 Mar 2001 — Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment. • https://www.exploit-db.com/exploits/20594 •
CVSS: 9.8EPSS: 10%CPEs: 20EXPL: 1CVE-2000-0574 – OpenBSD - 'ftp' Local Overflow
https://notcve.org/view.php?id=CVE-2000-0574
07 Jul 2000 — FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands. • https://www.exploit-db.com/exploits/396 •
CVSS: 9.8EPSS: 12%CPEs: 7EXPL: 1CVE-1999-0997 – WU-FTPD 2.4.2/2.5 .0/2.6.0/2.6.1/2.6.2 - FTP Conversion
https://notcve.org/view.php?id=CVE-1999-0997
20 Dec 1999 — wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress. • https://www.exploit-db.com/exploits/20563 •
CVSS: 10.0EPSS: 0%CPEs: 17EXPL: 0CVE-1999-0878
https://notcve.org/view.php?id=CVE-1999-0878
22 Aug 1999 — Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR. • http://www.securityfocus.com/bid/599 •
CVSS: 10.0EPSS: 8%CPEs: 17EXPL: 2CVE-1999-0368 – WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-1999-0368
09 Feb 1999 — Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. • https://www.exploit-db.com/exploits/19086 •
CVSS: 9.1EPSS: 1%CPEs: 32EXPL: 0CVE-1999-0017
https://notcve.org/view.php?id=CVE-1999-0017
10 Dec 1997 — FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017 •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-1999-0955
https://notcve.org/view.php?id=CVE-1999-0955
23 Sep 1997 — Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0955 •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1326
https://notcve.org/view.php?id=CVE-1999-1326
04 Jul 1997 — wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files. • http://marc.info/?l=bugtraq&m=87602167420401&w=2 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-1999-0202
https://notcve.org/view.php?id=CVE-1999-0202
01 Jan 1997 — The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. • https://www.cve.org/CVERecord?id=CVE-1999-0202 •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-1999-0080
https://notcve.org/view.php?id=CVE-1999-0080
30 Nov 1995 — Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command. • https://archive.nanog.org/mailinglist/mailarchives/old_archive/1995-11/msg00385.html •