PT-2001-1140 · Texas Imperial · Wftpd

Publicado 2001-01-09 · Atualizado 2008-09-05 · CVE-2000-1101

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WFTPD versions 2.41 and 3.00

Description A directory traversal issue allows local users to escape the home directory by using a "/../" string, which is a variation of the .. (dot dot) attack, when the "Restrict to home directory" option is enabled.

Recommendations For WFTPD version 2.41, disable the "Restrict to home directory" option or restrict access to the FTP server until a fix is available. For WFTPD version 3.00, consider disabling the FTP server functionality or limiting user access to prevent exploitation of the directory traversal issue until a patch is released.

Exploit

Correção

Identificadores relacionados

CVE-2000-1101

Produtos afetados

Wftpd

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-11/0386.html · Exploit
• 🔥 http://securityfocus.com/bid/2005 · Exploit
• http://iss.net/security_center/static/5608.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1101 · Nota de Segurança