Quick answers
- Is CVE-1999-0955 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-0955 being exploited in the wild.
- How severe is CVE-1999-0955?
- High severity, with a CVSS score of 7.6, published 23 September 1997.
- Which products and versions are affected?
- Washington University wu-ftpd; BSDI ftpd.
- Is there a fix for CVE-1999-0955?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-1999-0955 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-1999-0955?
- Check whether you run Bsdi Ftpd or Washington University Wu-Ftpd. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A race condition exists in the implementation of the SITE EXEC command within wu-ftpd and BSDI ftpd. The vulnerability is triggered when a remote attacker issues a SITE EXEC request, which allows for the execution of external programs on the server. Due to improper synchronization or timing flaws during the command execution process, an attacker can manipulate the execution environment to escalate privileges. Successful exploitation grants the attacker root-level access to the underlying operating system. This is a network-based attack that does not necessarily require prior authentication depending on the FTP configuration.
Affected products
- Washington University wu-ftpd
- BSDI ftpd
Timeline
- 1997-09-23: disclosed