{"id":"CVE-1999-0911","published":"2000-02-04T05:00:00Z","modified":"2024-08-01T16:55:28Z","title":"Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.","provenance":"source","from":"CVE.org"},"summary":{"text":"A buffer overflow in ProFTPD, wu-ftpd, and beroftpd lets remote attackers gain root access. The flaw is triggered by a series of MKD and CWD commands that create nested directories.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:49Z"},"cvss":null,"epss":{"score":0.38054,"percentile":0.9855,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/612","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.debian.org/security/1999/19990210","tags":["vendor-advisory","x_refsource_DEBIAN"]}],"techniques":[],"reports":[{"id":"SRC-3ec4b5433db23fb77a08","title":"Technical Analysis: Black Basta Malware Overview","publisher":"quadrantsec.com","url":"https://quadrantsec.com/resource/technical-analysis/black-basta-malware-overview","date":null,"mentions":[{"quote":"From the analyst's perspective, the only alert that was generated and brought to the SOC was a Suricata FTP rule looking for CVE 1999-0911, related to an overflow using the MKD command.","start":8282,"end":8467}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-1999-0892","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-0892","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":19475,"url":"https://www.exploit-db.com/exploits/19475","title":"ProFTPd 1.2 pre1/pre2/pre3/pre4/pre5 - Remote Buffer Overflow (1)","type":"remote","platform":"linux","date":"1999-08-17","verified":true,"provenance":"source"},{"id":19476,"url":"https://www.exploit-db.com/exploits/19476","title":"ProFTPd 1.2 pre1/pre2/pre3/pre4/pre5 - Remote Buffer Overflow (2)","type":"remote","platform":"linux","date":"1999-08-27","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"1999-08-17"},"first":{"date":"1999-08-17","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/19475"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"1999-08-17","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-19475)","url":"https://www.exploit-db.com/exploits/19475","provenance":"source"},{"date":"2000-02-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-1999-0911","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":28.6,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.71,"detail":"percentile 0.9855"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"2 Exploit-DB entries"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}