Vulnerability Details CVE-1999-1326
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=87602167420401&w=2
- http://marc.info/?l=bugtraq&m=87602167420408&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7169
- http://marc.info/?l=bugtraq&m=87602167420401&w=2
- http://marc.info/?l=bugtraq&m=87602167420408&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7169
Products affected by CVE-1999-1326
-
cpe:2.3:a:washington_university:wu-ftpd:2.4