Test Kennung:	1.3.6.1.4.1.25623.1.0.10452
Kategorie:	FTP
Titel:	wu-ftpd SITE EXEC vulnerability
Zusammenfassung:	The remote FTP server does not properly sanitize the argument of; the SITE EXEC command.
Beschreibung:	Summary: The remote FTP server does not properly sanitize the argument of the SITE EXEC command. Vulnerability Impact: It may be possible for a remote attacker to gain root access. Solution: Upgrade your wu-ftpd server (<= 2.6.0 are vulnerable) or disable any access from untrusted users (especially anonymous). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0573 AUSCERT Advisory: AA-2000.02 ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02 BugTraq ID: 1387 http://www.securityfocus.com/bid/1387 Bugtraq: 20000622 WuFTPD: Providing *remote* root since at least1994 (Google Search) http://marc.info/?l=bugtraq&m=96171893218000&w=2 Bugtraq: 20000623 WUFTPD 2.6.0 remote root exploit (Google Search) http://marc.info/?l=bugtraq&m=96179429114160&w=2 Bugtraq: 20000623 ftpd: the advisory version (Google Search) http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail@fiver.freemessage.com Bugtraq: 20000702 [Security Announce] wu-ftpd update (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html Bugtraq: 20000707 New Released Version of the WuFTPD Sploit (Google Search) http://marc.info/?l=bugtraq&m=96299933720862&w=2 Bugtraq: 20000723 CONECTIVA LINUX SECURITY ANNOUNCEMENT - WU-FTPD (re-release) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html Bugtraq: 20000929 [slackware-security] wuftpd vulnerability - Slackware 4.0, 7.0, 7.1, -current (Google Search) Caldera Security Advisory: CSSA-2000-020.0 http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt http://www.cert.org/advisories/CA-2000-13.html Debian Security Information: 20000623 (Google Search) FreeBSD Security Advisory: FreeBSD-SA-00:29 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1 NETBSD Security Advisory: NetBSD-SA2000-009 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc http://www.redhat.com/support/errata/RHSA-2000-039.html XForce ISS Database: wuftp-format-string-stack-overwrite XForce ISS Database: wuftp-format-string-stack-overwrite(4773) https://exchange.xforce.ibmcloud.com/vulnerabilities/4773 Common Vulnerability Exposure (CVE) ID: CVE-1999-0997 Bugtraq: 19991220 Security vulnerability in certain wu-ftpd (and derivitives) configurations (fwd) (Google Search) Debian Security Information: DSA-377 (Google Search) http://www.debian.org/security/2003/dsa-377 XForce ISS Database: wuftp-ftp-conversion
Copyright	Copyright (C) 2000 A. de Bernis

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.