(PVS) Signatures - Tenable Network Security

PVS ID: 1812 FAMILY: FTP Servers RISK: HIGH NESSUS ID:11094
Description: The remote WS_FTP server is vulnerable to various buffer overflows which may allow an
attacker to execute arbitrary commands on this host.
Solution: Upgrade to WS_FTP 2.0.3 or higher.
CVE-2001-1021
WFTP < 2.41 RNTO Command Handling DoS
PVS ID: 1813 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:10466
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote WFTP server crashes when it receives the command "RNTO x" right after the login.
An attacker may use this flaw to prevent this host from publishing anything using FTP.
Solution: Upgrade to WFTP 2.41 or higher.
CVE-2000-0648
VXWorks ftpd CEL Command Overflow DoS
PVS ID: 1814 FAMILY: FTP Servers RISK: HIGH NESSUS ID:11185
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote VXWorks host can be brought down entirely if a user issues a too long argument to
the CEL ftp command.
Solution: Contact your vendor and reference WindRiver field patch TSR 296292.
CVE-2002-2300
SunFTP Directory Traversal / Overflow
PVS ID: 1815 FAMILY: FTP Servers RISK: HIGH NESSUS ID:11373
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote FTP
server (SunFTP) allows a remote attacker to read arbitrary files on the remote host by
adding a double dot in front of their name. In addition to this, it is vulnerable to a buffer
overflow which may allow an attacker to execute arbitrary commands on the remote host.
Solution: The product has been discontinued by the vendor.
CVE-2000-0856
WebWeaver FTP RETR Command Remote DoS
PVS ID: 1816 FAMILY: FTP Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11584
Family Internet Services 461