CVE-2001-0187

Published: Mar 26, 2001Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Affected (19)

Products: Washington University: Wu Ftpd

Washington University

1 product

Wu Ftpd

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Washington University Wu Ftpd	Version 2.4.1
Washington University Wu Ftpd	Version 2.4.2_beta18
Washington University Wu Ftpd	Version 2.4.2_beta18_vr10
Washington University Wu Ftpd	Version 2.4.2_beta18_vr11
Washington University Wu Ftpd	Version 2.4.2_beta18_vr12
Washington University Wu Ftpd	Version 2.4.2_beta18_vr13
Washington University Wu Ftpd	Version 2.4.2_beta18_vr14
Washington University Wu Ftpd	Version 2.4.2_beta18_vr15
Washington University Wu Ftpd	Version 2.4.2_beta18_vr4
Washington University Wu Ftpd	Version 2.4.2_beta18_vr5
Washington University Wu Ftpd	Version 2.4.2_beta18_vr6
Washington University Wu Ftpd	Version 2.4.2_beta18_vr7
Washington University Wu Ftpd	Version 2.4.2_beta18_vr8
Washington University Wu Ftpd	Version 2.4.2_beta18_vr9
Washington University Wu Ftpd	Version 2.4.2_beta9
Washington University Wu Ftpd	Version 2.4.2_vr16
Washington University Wu Ftpd	Version 2.4.2_vr17
Washington University Wu Ftpd	Version 2.5
Washington University Wu Ftpd	Version 2.6