FTP : bftpd format string vulnerability

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.10568

Category: FTP

Title: bftpd format string vulnerability

Summary: NOSUMMARY

Description: Description:

The remote ftp server does not sanitize properly the output
it gets from the NLST command.

It may be possible for a remote attacker to gain root access
thanks to this bug if he can write in any directory served
by this ftp daemon.

Solution : Upgrade your bftpd server to version 1.0.13

Reference : http://online.securityfocus.com/archive/1/149216

Risk factor : High

Copyright This script is Copyright (C) 2000 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.10568
Category:	FTP
Title:	bftpd format string vulnerability
Summary:	NOSUMMARY
Description:	Description: The remote ftp server does not sanitize properly the output it gets from the NLST command. It may be possible for a remote attacker to gain root access thanks to this bug if he can write in any directory served by this ftp daemon. Solution : Upgrade your bftpd server to version 1.0.13 Reference : http://online.securityfocus.com/archive/1/149216 Risk factor : High
Copyright	This script is Copyright (C) 2000 Renaud Deraison