What’s Vulnerable › Vulnerabilities
CVE-1999-0997
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 6.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 1999-12-20 · updated 2026-06-16
Description
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Affected products
- Millenux Gmbh Anonftp: 2.8.1
- RedHat Linux: 5.2, 6.0, 6.1
- University Of Washington Wu-Ftpd: 2.4.2, 2.5.0, 2.6.0
References
Get alerted when CVE-1999-0997 or the next vulnerability affects your stack