CVE-1999-1333

critical

Description

automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.

References

http://www.redhat.com/support/errata/rh50-errata-general.html#ncftp

http://www.osvdb.org/6111

http://www.iss.net/security_center/static/7240.php

http://marc.info/?l=bugtraq&m=89042322924057&w=2

Details

Source: Mitre, NVD

Published: 1999-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01232

Detections

Analytics