| Package | Affected versions | Patched versions |
|---|---|---|
| anonftp | = 2.8.1 | |
| wu-ftpd | = 2.4.2= 2.5.0= 2.6.0 |
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free