Approved changes feed: RSS · Atom
cpe:2.3:a:washington_university:wu-ftpd:2.4:*:*:*:*:*:*:*part: a version: 2.4 update: *
| Vendor | Washington University (89f7b83f-6d19-58c0-824a-7154a1a3b13b) |
|---|---|
| Product | Wu Ftpd (c5e132ff-a5a2-5f77-a804-adf83c18bff0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dellelce/wuftpd |
purl2cpe | 2026-06-01 10:15:40.080486 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2001-0935 |
vulnerable | 2026-06-08 04:45:21.116274 |
Details available
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.
Published: 2002-02-02T05:00:00.000Z
Updated: 2024-08-08T04:37:07.294Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-1326 |
vulnerable | 2026-06-08 04:44:58.276098 |
Details available
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files.
Published: 2002-03-09T05:00:00.000Z
Updated: 2024-08-01T17:11:02.943Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0080 |
vulnerable | 2026-06-08 04:44:57.932568 |
Details available
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
Published: 1999-09-29T04:00:00.000Z
Updated: 2024-08-01T16:27:57.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0017 |
vulnerable | 2026-06-08 04:44:57.898919 |
Details available
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
Published: 1999-09-29T04:00:00.000Z
Updated: 2024-08-01T16:27:56.465Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.