CVE-1999-0997

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Dec 20, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-09985.0Cisco Cache Engine allows an attacker to replace content in the cache.CVE-1999-09994.3Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.CVE-1999-10005.0The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.CVE-1999-10012.6Cisco Cache Engine allows a remote attacker to gain access via a null username and password.CVE-1999-10025.0Netscape Navigator uses weak encryption for storing a user's Netscape mail password.CVE-1999-10035.0War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.CVE-1999-10045.0Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.CVE-1999-10055.0Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP CVE-1999-10065.0Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.CVE-1999-10077.6Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.CVE-1999-10087.2xsoldier program allows local users to gain root access via a long argument.CVE-1999-10092.6The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on th