Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-1999-1333
remote attack
linux 5.0
execute commands
ncftp 2.4.2
ftp client
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.039 Low
EPSS
Percentile
92.0%
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.
Affected configurations
Node
redhatlinuxRange≤5.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:linux | redhat linux | le | 5.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.039 Low
EPSS
Percentile
92.0%
Related for CVE-1999-1333