PT-2000-1579 · Texas Imperial · Wftpd Pro+1

Publicado 2000-07-21 · Atualizado 2008-09-10 · CVE-2000-0645

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions WFTPD and WFTPD Pro version 2.41

Description The issue allows remote attackers to cause a denial of service. This can be achieved by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist. Attackers can exploit this via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE).

Recommendations For WFTPD and WFTPD Pro version 2.41, consider restricting access to the RESTART (REST) command and the STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE) commands as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2000-0645

Produtos afetados

Wftpd

Wftpd Pro

Referências · 4

• 🔥 https://exploit-db.com/exploits/20101 · Exploit
• 🔥 http://securityfocus.com/bid/1506 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0645 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html · Aviso do Fabricante