Test Kennung:	1.3.6.1.4.1.25623.1.0.14598
Kategorie:	FTP
Titel:	WS_FTP Server Multiple Vulnerabilities (Nov 2005)
Zusammenfassung:	WS_FTP Server is prone to multiple vulnerabilities.
Beschreibung:	Summary: WS_FTP Server is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - A buffer overflow, caused by a vulnerability in the ALLO handler, an attacker can then execute arbitrary code - A flaw which allow an attacker to gain elevated privileges (SYSTEM level privileges) - A local or remote attacker, with write privileges on a directory can create a specially crafted file containing a large REST argument and resulting to a denial of service. Solution: Update to the latest version. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1848 BugTraq ID: 9953 http://www.securityfocus.com/bid/9953 Bugtraq: 20040323 How to crash a harddisk - the Ipswitch WS_FTP Server way (Google Search) http://marc.info/?l=bugtraq&m=108006717731989&w=2 http://www.osvdb.org/4542 http://securitytracker.com/id?1009529 http://secunia.com/advisories/11206 XForce ISS Database: wsftp-rest-dos(15560) https://exchange.xforce.ibmcloud.com/vulnerabilities/15560 XForce ISS Database: wsftp-rest-stor-dos(41831) https://exchange.xforce.ibmcloud.com/vulnerabilities/41831 Common Vulnerability Exposure (CVE) ID: CVE-2004-1883 Bugtraq: 20040323 ALLO ALLO WS_FTP Server (Google Search) http://marc.info/?l=bugtraq&m=108006553222397&w=2 Bugtraq: 20040323 Think of the buffers! Won't somebody think of the buffers?! (Google Search) http://www.securityfocus.com/archive/1/358361 XForce ISS Database: wsftp-allo-bo(15561) https://exchange.xforce.ibmcloud.com/vulnerabilities/15561 Common Vulnerability Exposure (CVE) ID: CVE-2004-1884 Bugtraq: 20040323 Open the WS_FTP Server backdoor to SYSTEM (Google Search) http://marc.info/?l=bugtraq&m=108006581418116&w=2 XForce ISS Database: wftp-site-gain-priviliege(15558) https://exchange.xforce.ibmcloud.com/vulnerabilities/15558 Common Vulnerability Exposure (CVE) ID: CVE-2004-1885 Common Vulnerability Exposure (CVE) ID: CVE-2004-1886
Copyright	Copyright (C) 2005 David Maciejak

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.