National Vulnerability Database (CVE-1999-0911)

National Cyber-Alert System Vulnerability Summary: CVE-1999-0911
Orirignal release date: 1999-08-27 Source: US-CERT/NIST ### Overview Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: ProFTPD Remote Buffer Overflow Hyperlink: http://www.securityfocus.com/vdb/bottom.html?vid=612 External Source: ISS X-Force Name: proftpd-long-dir-bo(3399) Hyperlink: http://xforce.iss.net/static/3399.php External Source: Bugtraq Name: ProFTP-1.2.0pre4 buffer overflow -- once more Hyperlink: http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3DPine.LNX.4.10.9909071813590.3522-200000@prof.fr.nessus.org External Source: DEBIAN Name: 19990210 Hyperlink: http://www.debian.org/security/1999/19990210 External Source: BID Name: 612 Hyperlink: http://www.securityfocus.com/bid/612 ### Vulnerable Software and Vendor ProFTPD (ProFTPD Project) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0911