The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
Get an AI-powered plain-language explanation of this vulnerability and remediation steps.
Login to generate AI explanation28 reference(s) from NVD