CVE-2001-0550
EXPLOITEDwu-ftpd 2.6.1 - Remote Command Execution via Glob Function
Title source: llmExploitation Summary
CVE-2001-0550 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including Teso, Core Security Technologies, gilberto47831.
AI-analyzed exploit summary This is a remote root exploit for wu-ftpd (CVE-2001-0550) targeting multiple Linux distributions. It leverages a buffer overflow vulnerability to execute arbitrary shellcode, providing remote command execution with root privileges.
Description
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
Exploits (3)
This is a remote root exploit for wu-ftpd (CVE-2001-0550) targeting multiple Linux distributions. It leverages a buffer overflow vulnerability to execute arbitrary shellcode, providing remote command execution with root privileges.
This exploit demonstrates a heap-corruption vulnerability in Wu-Ftpd's file globbing implementation, leading to a segmentation fault and potential remote code execution. The PoC triggers the vulnerability by sending a malformed globbing pattern (~{) during an FTP session.
This repository contains a forensic report on post-exploitation activities targeting a honeypot exploiting CVE-2001-0550 in wu-ftpd. It provides analysis rather than functional exploit code.