PT-2003-2274 · Washington University · Wu-Ftpd

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1329

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions wu-ftpd version 2.6.2

Description The issue is related to the ftpd.c component in wu-ftpd, which fails to close connections that have not been successfully established when running on certain operating systems. This can be exploited by remote attackers to cause a denial of service.

Recommendations For wu-ftpd version 2.6.2, consider implementing measures to limit the number of concurrent connections to prevent abuse, and ensure proper connection handling to mitigate the risk of denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-1329

Produtos afetados

Wu-Ftpd

Referências · 3

• ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/connect-dos.patch · Correção
• http://osvdb.org/34670 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1329 · Nota de Segurança