Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.10318
Kategorie:FTP
Titel:wu-ftpd buffer overflow
Zusammenfassung:NOSUMMARY
Beschreibung:Description:

It was possible to make the remote FTP server crash
by creating a huge directory structure.
This is usually called the 'wu-ftpd buffer overflow'
even though it affects other FTP servers.

It is very likely that an attacker can use this
flaw to execute arbitrary code on the remote
server. This will give him a shell on your system,
which is not a good thing.

Solution : upgrade your FTP server.
Consider removing directories writable by 'anonymous'.

Risk factor : High

Querverweis: BugTraq ID: 113
BugTraq ID: 2242
BugTraq ID: 599
BugTraq ID: 747
Common Vulnerability Exposure (CVE) ID: CVE-1999-0368
Cert/CC Advisory: CA-99.03
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368
Netect Security Advisory: palmetto.ftpd
XForce ISS Database: palmetto-ftpd-bo
Common Vulnerability Exposure (CVE) ID: CVE-1999-0878
AUSCERT Advisory: AA-1999.01
http://www.securityfocus.com/bid/599
Cert/CC Advisory: CA-99-13
COMPAQ Service Security Patch: SSRT0622
RedHat Security Advisories: RHSA1999031_01
XForce ISS Database: wu-ftpd-dir-name
Common Vulnerability Exposure (CVE) ID: CVE-1999-0879
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0879
XForce ISS Database: wuftp-message-file-root
Common Vulnerability Exposure (CVE) ID: CVE-1999-0950
http://www.securityfocus.com/bid/747
Bugtraq: 19991027 WFTPD v2.40 FTPServer remotely exploitable buffer overflow vulnerability (Google Search)
XForce ISS Database: wftpd-mkd-bo
CopyrightThis script is Copyright (C) 1999 Renaud Deraison

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.