What’s Vulnerable › Vulnerabilities

CVE-1999-0017

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1997-12-10 · updated 2026-06-16

Description

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Affected products

• Caldera Openlinux: 1.2
• FreeBSD: 1.0, 1.1, 1.2, 2.0, 2.1.0, 2.1.7
• GNU Inet: 5.01, 6.01, 6.02
• IBM AIX: 3.2, 4.1, 4.2, 4.3
• Netbsd: 1.0, 1.1, 1.2, 1.2.1
• Sco Open Desktop: 3.0
• Sco Openserver: 5.0.4
• Sco Unixware: 2.1
• Siemens Reliant Unix: all versions
• Sunos: 4.1.3u1, 4.1.4, 5.3, 5.4, 5.5, 5.5.1
• Washington University Wu-Ftpd: 2.4

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017

Get alerted when CVE-1999-0017 or the next vulnerability affects your stack