CVE-1999-0082

CWD ~root command in ftpd allows root access

published September 29, 1999

CVSS
โ€”
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

โš ๏ธ A simple command could grant root access to your server through ftpd! It's like handing a spare key to anyone who asks โ€” absolutely risky! ๐Ÿ”ฅ Think of it like a restaurant where the chef has a secret backdoor that lets anyone waltz right into the kitchen. If someone knows this secret, they can access everything โ€” and cause a real mess! With this vulnerability, an attacker could gain root access to your system, allowing them to do anything they wish โ€” steal data, install malware, or even shut down your server. This kind of unrestricted access can be devastating for any organization!

Put simply

Think of it like a restaurant where the chef has a secret backdoor that lets anyone waltz right into the kitchen. If someone knows this secret, they can access everything โ€” and cause a real mess! The vulnerability in ftpd allows unauthorized users to execute commands as root due to the CWD ~root command being improperly handled, opening the door to complete control of the system.

What to do

With this vulnerability, an attacker could gain root access to your system, allowing them to do anything they wish โ€” steal data, install malware, or even shut down your server. This kind of unrestricted access can be devastating for any organization! To remediate this issue, ensure that ftpd is updated to the latest version, which addresses this vulnerability. Additionally, review your server configurations to restrict access and implement strict user permissions. ๐Ÿ”’ You've got this! Follow these steps and your server will be secured in no time. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08281 ยท 94.9th percentile
Published
1999-09-29T04:00Z
EPSS history
Timeline
  • 29 SEP 04:00Z
    CWD ~root command in ftpd allows root access
    cvelistv5