CVE-1999-0368

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:proftpd_project:proftpd:1.2_pre1:::::::*
	cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:::::::*
	cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:caldera:openlinux:1.3:::::::*
	cpe:2.3:o:debian:debian_linux:2.0:::::::*
	cpe:2.3:o:redhat:linux:5.0:::::::*
	cpe:2.3:o:redhat:linux:5.1:::::::*
	cpe:2.3:o:sco:openserver:5.0:::::::*
	cpe:2.3:o:sco:openserver:5.0.2:::::::*
	cpe:2.3:o:sco:openserver:5.0.3:::::::*
	cpe:2.3:o:sco:openserver:5.0.4:::::::*
	cpe:2.3:o:sco:openserver:5.0.5:::::::*
	cpe:2.3:o:sco:unixware:7.0:::::::*
	cpe:2.3:o:sco:unixware:7.0.1:::::::*
	cpe:2.3:o:slackware:slackware_linux:3.4:::::::*
	cpe:2.3:o:slackware:slackware_linux:3.5:::::::*
	cpe:2.3:o:slackware:slackware_linux:3.6:::::::*

History

No history.

Information

Published : 1999-02-09 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-1999-0368

Mitre link : CVE-1999-0368

CVE.ORG link : CVE-1999-0368

JSON object : View

Products Affected

redhat

linux

caldera

openlinux

sco

openserver
unixware

debian

debian_linux

washington_university

wu-ftpd

slackware

slackware_linux

proftpd_project

proftpd

CWE

NVD-CWE-Other

{"id": "CVE-1999-0368", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "1999-02-09T05:00:00.000", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:proftpd_project:proftpd:1.2_pre1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE1015CB-9A33-48D5-861A-A1FC0D8D0FA6"}, {"criteria": "cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D48DE48-5216-42AB-BEA8-EA490C5D4278"}, {"criteria": "cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4989799F-143A-45E5-A30C-9E3203649770"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:caldera:openlinux:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EED21F27-4ADA-42AC-B28E-F849F47D4043"}, {"criteria": "cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}, {"criteria": "cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"}, {"criteria": "cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EF44364-0F57-4B74-81B0-501EA6B58501"}, {"criteria": "cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C19F7B3-9043-4E53-90DE-92A4387858A7"}, {"criteria": "cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0169CBF5-9301-42D2-A6DA-73393BD986D8"}, {"criteria": "cpe:2.3:o:sco:openserver:5.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6236FA51-E996-4E84-A8CC-2635A814CCC6"}, {"criteria": "cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "035FBF8B-EB91-4211-9979-8A9E913A54A1"}, {"criteria": "cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"}, {"criteria": "cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17439B5B-0B66-490B-9B53-2C9D576C879F"}, {"criteria": "cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF9FD7BF-97E4-426D-881F-03C9D5B8895D"}, {"criteria": "cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6732144-10D4-4114-A7DA-32157EE3EF38"}, {"criteria": "cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "125918E7-53BB-407A-8D95-5D95CDF39A88"}, {"criteria": "cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}