CyberSec.Space Logo
Back to CVE Browser

CVE-1999-0368

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0370%
EPSS Percentile17.91th
PublishedFeb 9, 1999
Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

Affected Platforms (CPE)

📦
Proftpd Project

Proftpd

= 1.2_pre1
📦
Washington University

Wu Ftpd

= 2.4.2_beta18
📦
Washington University

Wu Ftpd

= 2.4.2_beta18_vr9
💻
Caldera

Openlinux

= 1.3
💻
Debian

Debian Linux

= 2.0
💻
Redhat

Linux

= 5.0
💻
Redhat

Linux

= 5.1
💻
Sco

Openserver

= 5.0
💻
Sco

Openserver

= 5.0.2
💻
Sco

Openserver

= 5.0.3
💻
Sco

Openserver

= 5.0.4
💻
Sco

Openserver

= 5.0.5
💻
Sco

Unixware

= 7.0
💻
Sco

Unixware

= 7.0.1
💻
Slackware

Slackware Linux

= 3.4
💻
Slackware

Slackware Linux

= 3.5
💻
Slackware

Slackware Linux

= 3.6

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368

Related Vulnerabilities

CVE-2006-581510.0

Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated,...

CVE-1999-091110.0

Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands...

CVE-2003-050010.0

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote a...

CVE-2010-422110.0

Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attack...