CVE-2001-0187: Washington University Wu-Ftpd

High severity, CVSS 10.0. EPSS: 5.7% chance of exploitation in the next 30 days.

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Affected products

• Washington University Wu-Ftpd: version 2.4.1 only; version 2.4.2_beta9 only; version 2.4.2_beta18 only; version 2.4.2_beta18_vr4 only; version 2.4.2_beta18_vr5 only; version 2.4.2_beta18_vr6 only; …

Published 2001-03-26. Last modified 2026-06-16.