Is CVE-1999-0081 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0081 being exploited in the wild.

How severe is CVE-1999-0081?

Medium severity, with a CVSS score of 5, published 11 January 1997.

Is there a fix for CVE-1999-0081?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-0081 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-1999-0081?

Check whether you run Washington University Wu-Ftpd. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0081: Washington University wu-ftpd file overwrite via rnfr command

CVE-1999-0081 · Severity: medium · CVSS 5 · Published 1997-01-11

A vulnerability in the wu-ftpd file transfer service allows remote users to overwrite existing files on the server. This could lead to the corruption of important data or the replacement of legitimate files with malicious content. The issue stems from how the service handles file renaming commands, potentially impacting the integrity of the hosted file system.

Technologies: Washington University Wu-Ftpd. Vendors: Washington University.

Quick answers

Is CVE-1999-0081 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0081 being exploited in the wild.
How severe is CVE-1999-0081?: Medium severity, with a CVSS score of 5, published 11 January 1997.
Which products and versions are affected?: Washington University wu-ftpd.
Is there a fix for CVE-1999-0081?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-0081 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-1999-0081?: Check whether you run Washington University Wu-Ftpd. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The wu-ftpd service contains a vulnerability in its handling of the FTP 'RNFR' (Rename From) command. An attacker can leverage this flaw to overwrite files on the target system, potentially bypassing intended file system protections. The vulnerability is exploitable over the network without requiring specific authentication beyond what is needed to access the FTP service. This issue is classified as an improper input validation or logic flaw within the file renaming routine. Users should update to a patched version of wu-ftpd or migrate to a more secure FTP daemon.

Affected products

Washington University wu-ftpd

Timeline

1997-01-11: disclosed: Initial publication date in NVD

References

https://www.cve.org/CVERecord?id=CVE-1999-0081

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.