CVE-2001-0187

CRITICAL 10.0CVE-2001-0187 · Published 26/03/2001 · updated 16/06/2026

In short

CVE-2001-0187 is a CRITICAL (CVSS 10.0) vulnerability affecting wu-ftpd (washington university).
Chance of exploitation in the next 30 days (EPSS): 5.7%, higher than 93.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wu-ftpd washington_university	`= 2.4.1= 2.4.2_beta18= 2.4.2_beta18_vr10= 2.4.2_beta18_vr11= 2.4.2_beta18_vr12= 2.4.2_beta18_vr13= 2.4.2_beta18_vr14= 2.4.2_beta18_vr15= 2.4.2_beta18_vr4= 2.4.2_beta18_vr5= 2.4.2_beta18_vr6= 2.4.2_beta18_vr7= 2.4.2_beta18_vr8= 2.4.2_beta18_vr9= 2.4.2_beta9= 2.4.2_vr16= 2.4.2_vr17= 2.5= 2.6`	No fix yet

Description

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

References

More vulnerabilities in wu-ftpd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wu-ftpd

washington_university

= 2.4.1= 2.4.2_beta18= 2.4.2_beta18_vr10= 2.4.2_beta18_vr11= 2.4.2_beta18_vr12= 2.4.2_beta18_vr13= 2.4.2_beta18_vr14= 2.4.2_beta18_vr15= 2.4.2_beta18_vr4= 2.4.2_beta18_vr5= 2.4.2_beta18_vr6= 2.4.2_beta18_vr7= 2.4.2_beta18_vr8= 2.4.2_beta18_vr9= 2.4.2_beta9= 2.4.2_vr16= 2.4.2_vr17= 2.5= 2.6

No fix yet

More vulnerabilities in wu-ftpd

See all →