CVE-1999-1290

CVE-1999-1290 describes a buffer overflow vulnerability in nftp FTP client version 1.40, affecting the chris_matthee nftp product. This medium-severity flaw (CVSS 5.1) allows a remote, malicious FTP server to trigger a denial of service and potentially execute arbitrary commands through a crafted, long response string. While the attack vector is network-based, the high attack complexity suggests specific conditions are required for successful exploitation. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.