CVE-2001-0550
UnknownEPSS 74.76%
Last modified
CVE-2001-0550 is a vulnerability of currently unknown severity. wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).. EPSS estimates a 74.76% chance of exploitation in the next 30 days.
Description
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| David Madore | Ftpd-Bsd | 0.3.2 |
| David Madore | Ftpd-Bsd | 0.3.3 |
| Washington University | Wu-Ftpd | 2.5.0 |
| Washington University | Wu-Ftpd | 2.6.0 |
| Washington University | Wu-Ftpd | 2.6.1 |
References
- http://www.caldera.com/support/security/advisories/CSSA-2001-041.0.txtPatch, Vendor Advisory
- http://www.cert.org/advisories/CA-2001-33.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/886083Patch, Third Party Advisory, US Government Resource
- http://www.redhat.com/support/errata/RHSA-2001-157.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/3581Exploit, Patch, Vendor Advisory
- http://www.caldera.com/support/security/advisories/CSSA-2001-041.0.txtPatch, Vendor Advisory
- http://www.cert.org/advisories/CA-2001-33.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/886083Patch, Third Party Advisory, US Government Resource
- http://www.redhat.com/support/errata/RHSA-2001-157.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/3581Exploit, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2001-0550?
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
How severe is CVE-2001-0550?
Severity scoring for CVE-2001-0550 is pending analysis. The EPSS model estimates a 74.76% probability of exploitation in the next 30 days.
How do I fix CVE-2001-0550?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2001-0550?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST