PT-2000-1581 · Texas Imperial · Wftpd Pro+1
Publicado
2000-07-21
·
Atualizado
2008-09-10
·
CVE-2000-0647
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
WFTPD and WFTPD Pro version 2.41
Description
The issue allows remote attackers to cause a denial of service by executing an MLST command before logging into the server.
Recommendations
For WFTPD and WFTPD Pro version 2.41, consider restricting access to the MLST command until a patch is available. As a temporary workaround, restrict the execution of the MLST command before a user logs into the server to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Wftpd
Wftpd Pro