CVE-2001-0489
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute...
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
- Record
CVE-2001-0489- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
- Record
CVE-2001-0489- Updated
- 2026-11-02
EUVDEUVD-2001-0485 No score
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
- Record
EUVD-2001-0485- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vrqv-jfm9-wq9q No score
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute...
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
- Record
GHSA-vrqv-jfm9-wq9q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0489 is a high vulnerability (CVSS 7.5) in Gftp, published June 27, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/vuln-dev/2001-q2/0231.html
exchange.xforce.ibmcloud.com/vulnerabilities/6478
securityfocus.com/bid/2657
osvdb.org/1805
debian.org/security/2001/dsa-057
nvd.nist.gov/vuln/detail/CVE-2001-0489
github.com/advisories/GHSA-vrqv-jfm9-wq9q