Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-1999-0997

EPSS 3.82% · P88
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-1999-0997

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
多家厂商FTP"转换"功能远程执行命令漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
一些FTP服务器提供一种"转换"功能，在把文件发送给用户之前，先把文件pipe给一个程序进行处理。 某些FTP服务器配置上存在漏洞，远程攻击者可以利用"转换"功能在服务器上执行任意命令。 FTP客户端请求获取一个文件名，其后跟随.tar/.tar.gz/.Z/.gz的时候，某些FTP Server会自动执行/bin/tar之类的程序去打包、压缩并下载给FTP客户端，这是通过管道实现的。而tar这样的命令有能力执行任意命令，入侵者通过请求一个特殊的文件名而使FTP Server启动远程shell。现在已知在
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-1999-0997

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-1999-0997

请登录查看更多情报信息。

Same Patch Batch · n/a · 2000-04-25 · 34 CVEs total

CVE-2000-0112Debian GNU/Linux MBR漏洞
CVE-2000-0020DNS PRO 安全漏洞
CVE-2000-0024IIS“转义符解析”漏洞
CVE-2000-0033InterScan VirusWall Scan Evasion漏洞
CVE-2000-0042CSM Mailserver HELO远程缓冲区溢出漏洞
CVE-2000-0043CamShot GET 缓冲区溢出漏洞
CVE-2000-0050Allaire Spectra 1.0 Webtop漏洞
CVE-2000-0051Allaire Spectra数据索引DoS漏洞
CVE-2000-0070NT LPC特权提升漏洞
CVE-2000-0014Savant Web 服务器空字节漏洞
CVE-2000-0165ETL Delegate缓冲区溢出漏洞
CVE-2000-0181Check Point Firewall-1内部地址泄漏漏洞
CVE-2000-0184Printtool打印机共享密码漏洞
CVE-2000-0185RealServer内部IP地址泄漏漏洞
CVE-2000-0192Caldera OpenLinux rpm_query CGI泄漏系统RPM包安装信息漏洞
CVE-2000-0206Oracle for Linux安装漏洞
CVE-2000-0223wmcdplay缓冲区溢出漏洞
CVE-1999-0203Sendmail 安全漏洞
CVE-2000-0012Mini SQL w3-msql远程缓冲区溢出漏洞
CVE-2000-0010WebWho whois.cgi 安全漏洞

Showing top 20 of 34 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-1999-0997

No comments yet

Leave a comment