← Database

CVE-2001-0187

CRITICAL CVSS: 10.0 Published: 2001-03-26 Modified: 2026-06-16

Description

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Affected Platforms

Washington University Wu-Ftpd

Weakness Type

NVD-CWE-Other

References