CVE-1999-0878

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR

published January 4, 2000

CVSS
—
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

⚠️ A timeless classic from 1999, this buffer overflow in WU-FTPD lets remote attackers pull off a root privilege heist with just the right request! 🔥 Think of it as a well-meaning mover who accidentally drops a heavy box on your keyboard, causing a cascade of unintended reactions that opens the front door for anyone outside. The MAPPING_CHDIR vulnerability is like leaving a hidden side door unlocked while others are busy at the front! If exploited, attackers could gain root access to your server, potentially unleashing a whirlwind of chaos. They could modify files, steal sensitive data, or even take control of your entire FTP server! That's absolutely devastating!

Put simply

Think of it as a well-meaning mover who accidentally drops a heavy box on your keyboard, causing a cascade of unintended reactions that opens the front door for anyone outside. The MAPPING_CHDIR vulnerability is like leaving a hidden side door unlocked while others are busy at the front! This vulnerability occurs due to a buffer overflow in WU-FTPD and related FTP servers when handling directory mapping requests, allowing attackers to execute arbitrary code with root privileges.

What to do

If exploited, attackers could gain root access to your server, potentially unleashing a whirlwind of chaos. They could modify files, steal sensitive data, or even take control of your entire FTP server! That's absolutely devastating! To mitigate this risk, update your FTP server to the latest version that patches this flaw. Additionally, monitoring server logs for unusual activity and conducting regular security audits can help keep your system secure. You've got this! With a few updates, you’ll be back in the security game in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02222 · 82.6th percentile
Published
2000-01-04T05:00Z
EPSS history
Timeline
  • 04 JAN 05:00Z
    Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR
    cvelistv5