PT-2001-1752 · Washington University · Wu-Ftpd

Publicado 2001-11-30 · Atualizado 2018-05-03 · CVE-2001-0550

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: wu-ftpd version 2.6.1

Description: The issue allows remote attackers to execute arbitrary commands by providing a "~{" argument to commands such as CWD. This is due to improper handling by the glob function (ftpglob).

Recommendations: For wu-ftpd version 2.6.1, consider restricting access to the CWD command or disabling the ftpglob function until a patch is available. Avoid using the "~{" argument in commands to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-0550

Produtos afetados

Wu-Ftpd

Referências · 17

• 🔥 https://exploit-db.com/exploits/21161 · Exploit
• 🔥 https://exploit-db.com/exploits/348 · Exploit
• 🔥 http://securityfocus.com/bid/3581 · Exploit
• http://debian.org/security/2001/dsa-087 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7611 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000442 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=100700363414799&w=2 · Nota
• http://caldera.com/support/security/advisories/CSSA-2001-041.0.txt · Aviso do Fabricante
• http://cert.org/advisories/CA-2001-33.html · Correção
• http://novell.com/linux/security/advisories/2001_043_wuftpd_txt.html · Aviso do Fabricante
• http://securityfocus.com/archive/82/180823 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0550 · Nota de Segurança
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-090.php3 · Aviso do Fabricante
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-162 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-157.html · Aviso do Fabricante