CVE-2001-0550
UnknownEPSS 74.76%
Last modified
CVE-2001-0550 is a vulnerability of currently unknown severity. wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).. EPSS estimates a 74.76% chance of exploitation in the next 30 days.
Description
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| David Madore | Ftpd-Bsd | 0.3.2 |
| David Madore | Ftpd-Bsd | 0.3.3 |
| Washington University | Wu-Ftpd | 2.5.0 |
| Washington University | Wu-Ftpd | 2.6.0 |
| Washington University | Wu-Ftpd | 2.6.1 |
References
- http://www.caldera.com/support/security/advisories/CSSA-2001-041.0.txtPatch, Vendor Advisory
- http://www.cert.org/advisories/CA-2001-33.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/886083Patch, Third Party Advisory, US Government Resource
- http://www.redhat.com/support/errata/RHSA-2001-157.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/3581Exploit, Patch, Vendor Advisory
- http://www.caldera.com/support/security/advisories/CSSA-2001-041.0.txtPatch, Vendor Advisory
- http://www.cert.org/advisories/CA-2001-33.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/886083Patch, Third Party Advisory, US Government Resource
- http://www.redhat.com/support/errata/RHSA-2001-157.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/3581Exploit, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2001-0550?
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
How severe is CVE-2001-0550?
Severity scoring for CVE-2001-0550 is pending analysis. The EPSS model estimates a 74.76% probability of exploitation in the next 30 days.
How do I fix CVE-2001-0550?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2001
- CVE-2001-0544IIS 5.0 allows local users to cause a denial of service (han…
- CVE-2001-0545IIS 4.0 with URL redirection enabled allows remote attackers…
- CVE-2001-0546Memory leak in H.323 Gatekeeper Service in Microsoft Interne…
- CVE-2001-0547Memory leak in the proxy service in Microsoft Internet Secur…
- CVE-2001-0548Buffer overflow in dtmail in Solaris 2.6 and 7 allows local …
- CVE-2001-0549Symantec LiveUpdate 1.5 stores proxy passwords in cleartext …
- CVE-2001-0551Buffer overflow in CDE Print Viewer (dtprintinfo) allows loc…
- CVE-2001-0552ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and …
- CVE-2001-0553SSH Secure Shell 3.0.0 on Unix systems does not properly per…
- CVE-2001-0554Buffer overflow in BSD-based telnetd telnet daemon on variou…
- CVE-2001-0555ScreamingMedia SITEWare versions 2.5 through 3.1 allows a re…
- CVE-2001-0556The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local …
Are you affected by CVE-2001-0550?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
