Format string vulnerability in wu-ftp 2.6.1 and previous versions, when running with debug mode enabled, allows remote malicious users to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
washington university wu-ftpd 2.4.2 beta18 |
||
washington university wu-ftpd 2.4.2 beta18 vr14 |
||
washington university wu-ftpd 2.4.2 vr17 |
||
washington university wu-ftpd 2.4.2 beta18 vr9 |
||
washington university wu-ftpd 2.5 |
||
washington university wu-ftpd 2.4.1 |
||
washington university wu-ftpd 2.4.2 vr16 |
||
washington university wu-ftpd 2.4.2 beta18 vr11 |
||
washington university wu-ftpd 2.4.2 beta18 vr6 |
||
washington university wu-ftpd 2.4.2 beta18 vr4 |
||
washington university wu-ftpd 2.6 |
||
washington university wu-ftpd 2.4.2 beta18 vr12 |
||
washington university wu-ftpd 2.4.2 beta18 vr5 |
||
washington university wu-ftpd 2.4.2 beta18 vr13 |
||
washington university wu-ftpd 2.4.2 beta18 vr10 |
||
washington university wu-ftpd 2.4.2 beta9 |
||
washington university wu-ftpd 2.4.2 beta18 vr15 |
||
washington university wu-ftpd 2.4.2 beta18 vr7 |
||
washington university wu-ftpd 2.4.2 beta18 vr8 |