Multiple Vulnerabilities and Enhancements in ftpd on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities and Enhancements in ftpd Number : 20030304-01-P Date : March 24, 2003 Reference: CERT CA-1997-27 Reference: CERT VU2558 Reference: CERT VU258721 Reference: CVE CVE-1999-0017 Reference: CVE CVE-1999-0097...

CVE-1999-0351

CVE-1999-0351 describes an FTP PASV mode vulnerability (the “Pizza Thief” issue) allowing denial of service and potential data access/wijacking: an attacker can connect to the PASV data port before the intended client and receive data instead. The Red Hat, SGI, and CERT-derived materials in conne...