CVE-1999-0879

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Oct 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-08805.0Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.CVE-1999-08815.0Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-08825.0Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.CVE-1999-088310.0Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.CVE-1999-08845.0The Zeus web server administrative interface uses weak encryption for its passwords.CVE-1999-08853.6Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.CVE-1999-08869.0The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.CVE-1999-08875.0FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.CVE-1999-08884.6dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp useCVE-1999-08897.5Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.CVE-1999-08907.5iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.CVE-1999-08915.0The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.
CVE-1999-0879: Critical severity, CVSS 10.0 | Vulnix