Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0950. PoCs published by Alberto Solino, Alberto Soli.
AI-analyzed exploit summary The provided text describes a remote buffer overflow vulnerability in WFTPD due to insufficient bounds checking on MKD and CWD arguments. An authenticated attacker can exploit this to execute arbitrary code in the context of the affected service.
Description
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
Exploits (2)
The provided text describes a remote buffer overflow vulnerability in WFTPD due to insufficient bounds checking on MKD and CWD arguments. An authenticated attacker can exploit this to execute arbitrary code in the context of the affected service.
This Perl script demonstrates a remote buffer overflow vulnerability in multiple FTP, SMTP, POP3, and HTTP servers by sending excessively long strings to trigger a denial-of-service (DoS) condition. It targets specific versions of various servers, including WFTPD FTP Server v2.40, by exploiting insufficient bounds checking in commands like MKD and CWD.