Total vulnerabilities in the database
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
| Software | From | Fixed in |
|---|---|---|
| hp / hp-ux | 11.00 | 11.00.x |