Approved changes feed: RSS · Atom

cpe:2.3:a:washington_university:wu-ftpd:2.6:*:*:*:*:*:*:*

part: a version: 2.6 update: *

VendorWashington University (89f7b83f-6d19-58c0-824a-7154a1a3b13b)
ProductWu Ftpd (c5e132ff-a5a2-5f77-a804-adf83c18bff0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/dellelce/wuftpd purl2cpe 2026-06-01 10:15:40.109573

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-0187 vulnerable 2026-06-08 04:45:19.872667 Details available
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
Published: 2001-05-07T04:00:00.000Z
Updated: 2024-08-08T04:14:06.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0574 vulnerable 2026-06-08 04:45:18.365683 Details available
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
Published: 2000-07-19T04:00:00.000Z
Updated: 2024-08-08T05:21:31.195Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.