Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0148
HistoryApr 15, 2004 - 4:00 a.m.

CVE-2004-0148

2004-04-1504:00:00
[email protected]
web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

Affected configurations

NVD
Node
sgipropackMatch2.3
OR
sgipropackMatch2.4
OR
washington_universitywu-ftpdMatch2.4.1
OR
washington_universitywu-ftpdMatch2.4.2_beta2academ
OR
washington_universitywu-ftpdMatch2.4.2_beta18academ
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr4
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr5
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr6
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr7
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr8
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr9
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr10
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr11
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr12
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr13
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr14
OR
washington_universitywu-ftpdMatch2.4.2_beta18_vr15
OR
washington_universitywu-ftpdMatch2.4.2_vr16
OR
washington_universitywu-ftpdMatch2.4.2_vr17
OR
washington_universitywu-ftpdMatch2.5.0
OR
washington_universitywu-ftpdMatch2.6.0
OR
washington_universitywu-ftpdMatch2.6.1
OR
washington_universitywu-ftpdMatch2.6.2

Related

nessus 8
ubuntucve 1
openvas 4
cvelist 1
cve 1
freebsd 1
osv 1
debian 1
securityvulns 1
redhat 1
nessus
nessus
FreeBSD : wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed (3b7c7f6c-7102-11d8-873f-0020ed76ef5a)
2009-04-23 00:00:00
WU-FTPD restricted-gid Directory Access Restriction Bypass
2004-03-14 00:00:00
HP-UX PHNE_31732 : HP-UX Running wu-ftpd Local Unauthorized Access (HPSBUX01059 SSRT4704 rev.4)
2007-09-25 00:00:00
ubuntucve
ubuntucve
CVE-2004-0148
2004-04-15 00:00:00
openvas
openvas
FreeBSD Ports: wu-ftpd
2008-09-04 00:00:00
FreeBSD Ports: wu-ftpd
2008-09-04 00:00:00
Debian Security Advisory DSA 457-1 (wu-ftpd)
2008-01-17 00:00:00
cvelist
cvelist
CVE-2004-0148
2004-09-01 04:00:00
cve
cve
CVE-2004-0148
2004-09-01 04:00:00
freebsd
freebsd
wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed
2004-02-17 00:00:00
osv
osv
wu-ftpd - several vulnerabilities
2004-03-08 00:00:00
debian
debian
[SECURITY] [DSA 457-1] New wu-ftpd packages fix multiple vulnerabilities
2004-03-09 06:29:26
securityvulns
securityvulns
[Full-Disclosure] [SECURITY] [DSA 457-1] New wu-ftpd packages fix multiple vulnerabilities
2004-03-09 00:00:00
redhat
redhat
(RHSA-2004:096) wu-ftpd security update
2004-03-08 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2004-0148
nessus8ubuntucve1openvas4cvelist1cve1freebsd1osv1debian1securityvulns1redhat1