CVE-1999-1333 - automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded

Back Back to CVE browser

HIGH

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded

Published Mar 9, 2002

7.5

HIGH

CVSS 2.0

EPSS 3.38%

Description

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://marc.info/?l=bugtraq&m=89042322924057&w=2
mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/7240.php
vdb-entryx_refsource_XF
http://www.osvdb.org/6111
vdb-entryx_refsource_OSVDB
http://www.redhat.com/support/errata/rh50-errata-general.html#ncftp
x_refsource_CONFIRM

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=89042322924057&w=2		mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/7240.php		vdb-entryx_refsource_XF
http://www.osvdb.org/6111		vdb-entryx_refsource_OSVDB
http://www.redhat.com/support/errata/rh50-errata-general.html#ncftp		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2002

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1333

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1333

Red Hat

Severity n/a

Public date n/a

Links CVE-1999-1333