Page 4 of 20 results (0.006 seconds)

CVSS: 7.5EPSS: 1%CPEs: 32EXPL: 0

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017 •

CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0

Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0955 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files. • http://marc.info/?l=bugtraq&m=87602167420401&w=2 http://marc.info/?l=bugtraq&m=87602167420408&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/7169 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. • https://www.cve.org/CVERecord?id=CVE-1999-0202 •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command. • https://archive.nanog.org/mailinglist/mailarchives/old_archive/1995-11/msg00385.html •