CVE-1999-0017

Description

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Affected products

• caldera / openlinux1.2 – 1.2
• FreeBSD / FreeBSD2.1.0 – 2.1.0
• FreeBSD / FreeBSD1.2 – 1.2
• FreeBSD / FreeBSD2.0 – 2.0
• FreeBSD / FreeBSD2.1.7 – 2.1.7
• FreeBSD / FreeBSD1.0 – 1.0
• FreeBSD / FreeBSD1.1 – 1.1
• gnu / inet6.02 – 6.02
• gnu / inet5.01 – 5.01
• gnu / inet6.01 – 6.01
• ibm / aix4.2 – 4.2
• ibm / aix3.2 – 3.2
• ibm / aix4.1 – 4.1
• ibm / aix4.3 – 4.3
• NetBSD / netbsd1.1 – 1.1
• NetBSD / netbsd1.0 – 1.0
• NetBSD / netbsd1.2 – 1.2
• NetBSD / netbsd1.2.1 – 1.2.1
• sco / open_desktop3.0 – 3.0
• sco / openserver5.0.4 – 5.0.4
• sco / unixware2.1 – 2.1
• Siemens / reliant_unix
• sun / sunos5.4 – 5.4
• sun / sunos5.4 – 5.4
• sun / sunos5.5 – 5.5
• sun / sunos5.5 – 5.5
• sun / sunos5.5.1 – 5.5.1
• sun / sunos4.1.3u1 – 4.1.3u1
• sun / sunos4.1.4 – 4.1.4
• sun / sunos5.3 – 5.3
• sun / sunos5.5.1 – 5.5.1
• washington_university / wu-ftpd2.4 – 2.4

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017