Approved changes feed: RSS · Atom
cpe:2.3:a:washington_university:wu-ftpd:2.5.0:*:*:*:*:*:*:*part: a version: 2.5.0 update: *
| Vendor | Washington University (89f7b83f-6d19-58c0-824a-7154a1a3b13b) |
|---|---|
| Product | Wu Ftpd (c5e132ff-a5a2-5f77-a804-adf83c18bff0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dellelce/wuftpd |
purl2cpe | 2026-06-01 10:15:40.108352 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-0148 |
vulnerable | 2026-06-08 04:47:48.779121 |
Details available
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T00:10:03.675Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0854 |
vulnerable | 2026-06-08 04:47:22.733755 |
Details available
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0853 |
vulnerable | 2026-06-08 04:47:22.730020 |
Details available
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.707Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0550 |
vulnerable | 2026-06-08 04:45:20.463880 |
Details available
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
Published: 2002-06-25T04:00:00.000Z
Updated: 2024-08-08T04:21:38.519Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.