ID de Prueba:	1.3.6.1.4.1.25623.1.0.100282
Categoría:	FTP
Título:	WarFTPD Multiple Format String Vulnerabilities
Resumen:	WarFTPd is prone to multiple remote format-string vulnerabilities; because the application fails to sanitize user-supplied input before passing it to a formatted-output function.
Descripción:	Summary: WarFTPd is prone to multiple remote format-string vulnerabilities because the application fails to sanitize user-supplied input before passing it to a formatted-output function. Vulnerability Impact: An attacker can exploit these issues to crash the server and possibly to execute arbitrary code within the context of the server, but this has not been confirmed. Affected Software/OS: WarFTPd 1.82.00-RC11 is reported vulnerable. Prior versions may be vulnerable as well. Solution: Updates are available. Please see the references for details. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5789 BugTraq ID: 20944 http://www.securityfocus.com/bid/20944 Bugtraq: 20061107 WarFTPd 1.82.00-RC11 Remote Denial Of Service (Google Search) http://www.securityfocus.com/archive/1/450804/100/0/threaded http://securitytracker.com/id?1017174 http://secunia.com/advisories/22755 http://securityreason.com/securityalert/1832 http://www.vupen.com/english/advisories/2006/4398 XForce ISS Database: warftpd-string-dos(30077) https://exchange.xforce.ibmcloud.com/vulnerabilities/30077
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.