CVE-2001-0489: Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands

Unscored severity · published Jun 27, 2001

CVE-2001-0489

Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands

–

CVSS

EPSS

On KEV

Description

Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.0% · higher than 81% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

through 2.0.7 · source: NVD

Affected product

Gftp

References