(PVS) Signatures - Tenable Network Security

Description: The remote FTP server is running WebWeaver FTPd. There is a flaw in this server which
may allow anyone to crash it remotely by requesting a non-existing file.
Solution: No solution is known at this time.
CVE Not available
Debian proftpd root Privilege Escalation
PVS ID: 1817 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:11450
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors\n\nThe remote FTP
server is subject to two flaws:\n- There is a configuration error in the postinst script, when
the user enters 'yes', when asked if anonymous access should be enabled. The postinst script
wrongly leaves the 'run as uid/gid root' configuration option in /etc/proftpd.conf, and adds a
'run as uid/gid nobody' option that has no effect.\n There is a bug that comes up when /var
is a symlink, and proftpd is restarted. When stopping proftpd, the /var symlink is removed;
when it's started again a file named /var is created.
Solution: Upgrade proftpd to proftpd-1.2.0pre10-2.0potato1 or higher.
CVE-2001-0456
ProFTPD cwd Command Format String
PVS ID: 1818 FAMILY: FTP Servers RISK: HIGH NESSUS ID:11407
Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
ProFTPd server is as old or older than 1.2.0rc2. There is a format string vulnerability in this
version that might allow an attacker to execute arbitrary code on this host.
Solution: Upgrade to the latest version of ProFTPd.
CVE-2001-0318
HP-UX ftpd glob() Expansion STAT Command Remote Overflow
PVS ID: 1819 FAMILY: FTP Servers RISK: HIGH NESSUS ID:11372
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nA buffer overflow in
FTP server in HPUX 11 and previous allows remote attackers to execute arbitrary
commands by creating a long pathname and calling the STAT command, which uses glob
to generate long strings.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2001-0248
Anonymous FTP Detection (login: ftp)
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 462