CVE-1999-0017: Caldera Openlinux

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Affected products

• Caldera Openlinux: version 1.2 only
• Freebsd Freebsd: version 1.0 only; version 1.1 only; version 1.2 only; version 2.0 only; version 2.1.0 only; version 2.1.7 only
• GNU Inet: version 5.01 only; version 6.01 only; version 6.02 only
• IBM Aix: version 3.2 only; version 4.1 only; version 4.2 only; version 4.3 only
• Netbsd Netbsd: version 1.0 only; version 1.1 only; version 1.2 only; version 1.2.1 only
• Sco Open Desktop: version 3.0 only
• Sco Openserver: version 5.0.4 only
• Sco Unixware: version 2.1 only
• Siemens Reliant Unix: any version
• Sun Sunos: version 4.1.3u1 only; version 4.1.4 only; version 5.3 only; version 5.4 only; version 5.5 only; version 5.5.1 only
• Washington University Wu-Ftpd: version 2.4 only

Published 1997-12-10. Last modified 2026-06-16.