27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

WU-FTPD < 2.6.1 "SITE EXEC" Command Overflow<br />

<strong>PVS</strong> ID: 1808 FAMILY: FTP Servers RISK: HIGH NESSUS ID:10452<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote WU-FTP<br />

server is vulnerable to a flaw which may allow an attacker to execute arbitrary code with its<br />

privileges (typically root) by sending a malformed argument to the SITE EXEC command.<br />

Solution: Upgrade to wu-ftpd 2.6.1 or higher.<br />

CVE-1999-0997<br />

WU-FTPD < 2.6.2 PASV Command Format String Arbitrary Code Execution<br />

<strong>PVS</strong> ID: 1809 FAMILY: FTP Servers RISK: HIGH NESSUS ID:11331<br />

Description: The remote WU-FTPD server is vulnerable to a format string flaw when it is run in debug<br />

mode. An attacker may use this flaw to execute arbitrary code on this host by sending a<br />

PASV command with a specially crafted argument.<br />

Solution: Upgrade to WU-FTPD 2.6.2 or higher.<br />

CVE-2001-0187<br />

WU-FTPD < 2.4.3 Directory Structure Processing Overflow<br />

<strong>PVS</strong> ID: 1810 FAMILY: FTP Servers RISK: HIGH NESSUS ID:10318<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote<br />

WU-FTPD server is vulnerable to a buffer overflow bug when it processes directories<br />

structure names. An attacker may use this flaw by creating a huge directory structure with<br />

specially malformed names, and may be able to execute arbitrary commands on this host<br />

with the privileges of the FTP daemon (typically, root)<br />

Solution: Upgrade to WU-FTPD 2.4.3 or higher.<br />

CVE-1999-0950<br />

WU-FTPD < 2.6.1 Glob Command Overflow<br />

<strong>PVS</strong> ID: 1811 FAMILY: FTP Servers RISK: HIGH NESSUS ID:11332<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote WU-FTP<br />

server is vulnerable to a buffer overflow when it receives a malformed glob command. An<br />

attacker may use this flaw to execute arbitrary code on this host.<br />

Solution: Upgrade to WU-FTPD 2.6.1 or higher.<br />

CVE-2001-0935<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

WS_FTP < 2.0.3 Multiple Command Long Argument Overflows<br />

Family Internet Services 460

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!