CVE-1999-0368

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-03704.6In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.CVE-1999-03711.2Lynx allows a local user to overwrite sensitive files through /tmp symlinks.CVE-1999-03722.1The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.CVE-1999-03737.2Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root.CVE-1999-03742.1Debian GNU/Linux cfengine package is susceptible to a symlink attack.CVE-1999-03757.5Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands.CVE-1999-03764.6Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.CVE-1999-03775.0Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through mCVE-1999-03785.0InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.CVE-1999-03797.5Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe foCVE-1999-03804.6SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by CVE-1999-03817.2super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.
CVE-1999-0368: Critical severity, CVSS 10.0 | Vulnix