CVE-1999-0878

CRITICAL 10.0CVE-1999-0878 · Published 22/08/1999 · updated 16/06/2026

In short

CVE-1999-0878 is a CRITICAL (CVSS 10.0) vulnerability affecting beroftpd (beroftpd), wu-ftpd (washington university).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
beroftpd beroftpd	`= 1.3.2= 1.3.3= 1.3.4`	No fix yet
wu-ftpd washington_university	`= 2.4.2_beta18_vr10= 2.4.2_beta18_vr11= 2.4.2_beta18_vr12= 2.4.2_beta18_vr13= 2.4.2_beta18_vr14= 2.4.2_beta18_vr15= 2.4.2_beta18_vr4= 2.4.2_beta18_vr5= 2.4.2_beta18_vr6= 2.4.2_beta18_vr8= 2.4.2_beta18_vr9= 2.4.2_vr16= 2.4.2_vr17= 2.5`	No fix yet

Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.