wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
> AFFECTED_PRODUCTS
Red Hat - Linux
Version: 5.2
Red Hat - Linux
Version: 6.0
Red Hat - Linux
Version: 6.1
University Of Washington - Wu Ftpd
Version: 2.4.2
University Of Washington - Wu Ftpd
Version: 2.5.0
University Of Washington - Wu Ftpd
Version: 2.6.0
Millenux Gmbh - Anonftp
Version: 2.8.1
> HISTORIQUE DES MODIFICATIONS
Première apparition
20/12/1999 05:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 13:59
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 1 year ago