Approved changes feed: RSS · Atom
cpe:2.3:a:washington_university:wu-ftpd:2.4.1:*:*:*:*:*:*:*part: a version: 2.4.1 update: *
| Vendor | Washington University (89f7b83f-6d19-58c0-824a-7154a1a3b13b) |
|---|---|
| Product | Wu Ftpd (c5e132ff-a5a2-5f77-a804-adf83c18bff0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dellelce/wuftpd |
purl2cpe | 2026-06-01 10:15:40.081679 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-0148 |
vulnerable | 2026-06-08 04:47:48.769344 |
Details available
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T00:10:03.675Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0854 |
vulnerable | 2026-06-08 04:47:22.733463 |
Details available
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0853 |
vulnerable | 2026-06-08 04:47:22.719675 |
Details available
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.707Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0187 |
vulnerable | 2026-06-08 04:45:19.871620 |
Details available
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
Published: 2001-05-07T04:00:00.000Z
Updated: 2024-08-08T04:14:06.536Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0955 |
vulnerable | 2026-06-08 04:44:58.169244 |
Details available
Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command.
Published: 2000-01-18T05:00:00.000Z
Updated: 2024-08-01T16:55:29.331Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.