CVE-2001-0138

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

CVSS v3.1

—

EPSS

0.30%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

5 relationships

Timeline

disclosure → media coverage

Mar 12, 2001

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026