[Full-Disclosure] iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability

WU-FTPD File Globbing Denial of Service Vulnerability iDEFENSE Security Advisory 02.25.05 www.idefense.com/application/poi/display?id=207&type=vulnerabilities February 25, 2005 I. BACKGROUND WU-FTPD is an ftp daemon for Unix systems developed at Washington University. More information is availabl...

WU-FTPD 2.6.2 - File Globbing Denial of Service

/ wu-ftpd include include include include include include define SERVERPORT 21 usagechar name printf"usage: %s -h hostname/ip -u user -p passwd\n",name; printf"\t\t/str0ke!milw0rm.com wu-ftpd haddrtype; memcpychar &servAddr.sinaddr.saddr, h-haddrlist0, h-hlength; servAddr.sinport = htonsSERVERPOR...

CVE-2005-0256: Improper Restriction of Operations within the Bounds of a Memory Buffer

The wufnmatch function in wufnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service CPU exhaustion by recursion via a glob pattern with a large number of wildcard characters, as demonstrated using the dir command...

CVE-2005-0547

Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."...

HP-UX PHNE_23950 : HP-UX Running ftp and ftpd, Remote Unauthorized Access (HPSBUX00162 SSRT4883 rev.4)

s700800 11.11 ftpd1M patch : ftpd and ftp incorrectly manage buffers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE23950. The text itself is copyright C Hewlett-Packard Development Company, L.P...

HP-UX PHNE_24395 : s700_800 11.04 (VVOS) ftpd(1M) and ftp(1) patch

s700800 11.04 VVOS ftpd1M and ftp1 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP-UX running ftpd. The vulnerability could be exploited by a remote unauthenticated user to list directories with the privileges of the...

HP-UX Security patch : PHNE_22059

The remote host is missing HP-UX Security Patch number PHNE22059 . Sec. Vulnerability in ftpd Rev.03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17103; scriptversion"1.7";...

HP-UX Security patch : PHNE_22057

The remote host is missing HP-UX Security Patch number PHNE22057 . Sec. Vulnerability in ftpd Rev.03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17105; scriptversion"1.7";...

HP-UX PHNE_23949 : s700_800 11.00 ftpd(1M) and ftp(1) patch

s700800 11.00 ftpd1M and ftp1 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP-UX running ftpd. The vulnerability could be exploited by a remote unauthenticated user to list directories with the privileges of the root...

HP-UX PHNE_21936 : HPSBUX0007-117 Sec. Vulnerability in ftpd (rev.5)

s700800 11.00 ftpd1M and ftp1 patch : The ftp server ftpd on HP-UX allows users root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE21936. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHNE_29462 : s700_800 11.22 ftpd(1M) and ftp(1) patch

s700800 11.22 ftpd1M and ftp1 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP-UX running ftpd where the vulnerability could be exploited to allow a remote authorized user unauthorized access to files. HPSBUX01119...

HP-UX Security patch : PHNE_22058

The remote host is missing HP-UX Security Patch number PHNE22058 . Sec. Vulnerability in ftpd Rev.03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17104; scriptversion"1.7";...

HP-UX PHNE_31034 : s700_800 11.04 (VVOS) ftpd(1M) and ftp(1) patch

s700800 11.04 VVOS ftpd1M and ftp1 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running ftpd, where a buffer overflow in ftpd could be remotely exploited to allow an unauthorized user to gain privileged...

HP-UX Security patch : PHNE_10009

The remote host is missing HP-UX Security Patch number PHNE10009 . Security Vulnerability in the ftpd/kftpd executable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17110;...

HP-UX PHNE_14479 : s700_800 11.00 ftpd(1M) and ftp(1) patch

s700800 11.00 ftpd1M and ftp1 patch : ftp client interprets server provided filenames which can cause commands to be run on the client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE14479. The text itself...

HP-UX PHNE_29460 : s700_800 11.00 ftpd(1M) and ftp(1) patch

s700800 11.00 ftpd1M and ftp1 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running ftp where the vulnerability could be exploited remotely to allow unauthorized access. HPSBUX01050 SSRT3456 - A potentia...

wu-ftpd -- remote globbing DoS vulnerability

An iDEFENSE Security Advisory reports: Remote exploitation of an input validation vulnerability in version 2.6.2 of WU-FPTD could allow for a denial of service of the system by resource exhaustion. The vulnerability specifically exists in the wufnmatch function in wufnmatch.c. When a pattern...

War FTPD FTP server format string bug

CWD command format string bug...

CVE-2004-1889

Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service hang via a link failure with Microsoft Windows...

Debian DSA-357-1 : wu-ftpd - remote root exploit

iSEC Security Research reports that wu-ftpd contains an off-by-one bug in the fbrealpath function which could be exploited by a logged-in user local or anonymous to gain root privileges. A demonstration exploit is reportedly available. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...