(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote ProFTPd
server is vulnerable to a buffer overflow when issued a too long mkdir command. An
attacker may use this flaw to execute arbitrary commands on the remote host.
Solution: Upgrade to version 1.2.0pre6 or higher.
CVE-1999-0911
ProFTPd ASCII Newline Character Overflow
PVS ID: 1844 FAMILY: FTP Servers RISK: HIGH NESSUS ID:11849
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of ProFTPd which seems to be vulnerable to a buffer overflow when a
user downloads a malformed ASCII file.\nAn attacker with upload privileges on this host
may abuse this flaw to gain a root shell on this host.
Solution: Upgrade to ProFTPd 1.2.9 or 1.2.8p or higher.
CVE-2003-0831
wzdftp < 0.1rc5 Mutliple DoS
PVS ID: 1845 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote host is running wzdftpd. Versions of this software prior to 0.1rc5 contain a
number of denial of service (DoS) vulnerabilities. However, this may be a false positive as
wzdftpd does not display its version number in the 220 banner.
Solution: Upgrade to version 0.1rc5 or higher.
CVE Not available
Access Point Detection via FTP Server Version
PVS ID: 1846 FAMILY: FTP Servers
RISK:
MEDIUM
Description: The remote host is a Wireless Access Point (WAP).
NESSUS ID:11026
Solution: Ensure that the proper physical and logical controls exist around the WAP.
CVE Not available
Access Point Detection via FTP Server Version
PVS ID: 1847 FAMILY: FTP Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11026
Family Internet Services 469