PT-2000-1582 · Texas Imperial · Wftpd Pro+1
Publicado
2000-07-11
·
Atualizado
2008-09-10
·
CVE-2000-0648
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
WFTPD and WFTPD Pro version 2.41
Description
The issue allows local users to cause a denial of service. This is achieved by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command.
Recommendations
For WFTPD and WFTPD Pro version 2.41, consider restricting the use of the RNTO command until a patch is available to prevent the denial of service.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Wftpd
Wftpd Pro