(PVS) Signatures - Tenable Network Security

Solution: No solution is known at this time.
CVE-2001-0767
GuildFTPd Traversal Arbitrary File Enumeration
PVS ID: 1840 FAMILY: FTP Servers RISK: HIGH NESSUS ID:10471
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote FTP server (GuildFTPD) can be used to determine if a given file
exists on the remote host by adding dot-dot-slashes in front of the filename.
Solution: Upgrade according to vendor recommendations.
CVE-2000-0640
Microsoft IIS FTP Status Request DoS
PVS ID: 1841 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:10934
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nIt may
be possible to make the remote FTP server crash by sending the command 'STAT
*?AAAAA....AAAAA' An attacker may use this flaw to prevent your FTP server from
working properly.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2002-0073
WarFTPd Multiple Command CPU Consumption DoS
PVS ID: 1842 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:10822
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote WarFTPd server is running a 1.71 version. It is possible for a remote user to cause a
denial of service on a host running Serv-U FTP Server, G6 FTP Server or WarFTPd Server.
Repeatedly submitting an 'a:/' GET or RETR request, appended with arbitrary data, will
cause the CPU usage to spike to 100%.
Solution: Upgrade to the latest version of WarFTPd.
CVE Not available
ProFTPd < 1.2.0pre6 mkdir Command Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1843 FAMILY: FTP Servers RISK: HIGH NESSUS ID:10189
Family Internet Services 468