122 matches found
CVE-2006-7094
ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...
CVE-2006-7094
ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...
CVE-2006-6008
ftpd in Linux Netkit linux-ftpd 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these calls fail in cases such as PAM failures or resource limits, a different...
WU-FTPD wu_fnmatch() Function File Globbing Remote DoS
The version of WU-FTPD running on the remote host exhausts all available resources on the server when it repeatedly receives the following command : LIST .... This issue has been confirmed in WU-FTPD 2.6.2 and earlier. C Tenable Network Security, Inc. References:...
CVE-2005-0547
Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."...
CVE-2005-0256
The wufnmatch function in wufnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service CPU exhaustion by recursion via a glob pattern with a large number of wildcard characters, as demonstrated using the dir command...
[Full-Disclosure] iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability
WU-FTPD File Globbing Denial of Service Vulnerability iDEFENSE Security Advisory 02.25.05 www.idefense.com/application/poi/display?id=207&type=vulnerabilities February 25, 2005 I. BACKGROUND WU-FTPD is an ftp daemon for Unix systems developed at Washington University. More information is availabl...
WU-FTPD 2.6.2 - File Globbing Denial of Service
/ wu-ftpd include include include include include include define SERVERPORT 21 usagechar name printf"usage: %s -h hostname/ip -u user -p passwd\n",name; printf"\t\t/str0ke!milw0rm.com wu-ftpd haddrtype; memcpychar &servAddr.sinaddr.saddr, h-haddrlist0, h-hlength; servAddr.sinport = htonsSERVERPOR...
WU-FTPD 2.6.2 - File Globbing Denial of Service
WU-FTPD 2.6.2 - File Globbing Denial of Service / wu-ftpd include include include include include include define SERVERPORT 21 usagechar name printf"usage: %s -h hostname/ip -u user -p passwd\n",name; printf"\t\t/str0ke!milw0rm.com wu-ftpd haddrtype; memcpychar &servAddr.sinaddr.saddr,...
wu-ftpd <= 2.6.2 File Globbing Denial of Service Exploit
Exploit for linux platform in category dos / poc ======================================================== wu-ftpd include include include include include include define SERVERPORT 21 usagechar name printf"usage: %s -h hostname/ip -u user -p passwd\n",name; printf"\t\t/str0ke!milw0rm.com wu-ftpd =...
wu-ftpd <= 2.6.2 File Globbing Denial of Service Exploit
No description provided by source. / wu-ftpd = 2.6.2 File Globbing DoS [email protected] Advisory: http://www.idefense.com/application/poi/display?id=207&type=vulnerabilities&flashstatus=true Adam Zabrocki pi3 / pi3ki31ny is credited with this discovery. / include sys/types.h include sys/socket....
CVE-2005-0547
Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."...
HP-UX Security patch : PHNE_22058
The remote host is missing HP-UX Security Patch number PHNE22058 . Sec. Vulnerability in ftpd Rev.03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17104; scriptversion"1.7";...
HP-UX Security patch : PHNE_10009
The remote host is missing HP-UX Security Patch number PHNE10009 . Security Vulnerability in the ftpd/kftpd executable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17110;...
HP-UX PHNE_21936 : HPSBUX0007-117 Sec. Vulnerability in ftpd (rev.5)
s700800 11.00 ftpd1M and ftp1 patch : The ftp server ftpd on HP-UX allows users root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE21936. The text itself is copyright C Hewlett-Packard Development...
wu-ftpd -- remote globbing DoS vulnerability
An iDEFENSE Security Advisory reports: Remote exploitation of an input validation vulnerability in version 2.6.2 of WU-FPTD could allow for a denial of service of the system by resource exhaustion. The vulnerability specifically exists in the wufnmatch function in wufnmatch.c. When a pattern...
CVE-2004-1889
Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service hang via a link failure with Microsoft Windows...
Debian DSA-087-1 : wu-ftpd - remote root exploit
CORE ST reports that an exploit has been found for a bug in the wu-ftpd glob code this is the code that handles filename wildcard expansion. Any logged in user including anonymous FTP users can exploit the bug to gain root privileges on the server. %NASLMINLEVEL 70300 C Tenable Network Security,...
Debian DSA-377-1 : wu-ftpd - insecure program execution
wu-ftpd, an FTP server, implements a feature whereby multiple files can be fetched in the form of a dynamically constructed archive file, such as a tar archive. The names of the files to be included are passed as command line arguments to tar, without protection against them being interpreted as...
CVE-2004-0148
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...