PT-2004-2789 · Sgi · Irix

Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-1891

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SGI IRIX version 6.5.20

Description The ftp syslog function in ftpd has an issue related to anonymous FTP, which may prevent the actions of anonymous users from being logged. The exact impact of this issue is unknown.

Recommendations For SGI IRIX version 6.5.20, consider modifying the ftp syslog function to properly handle anonymous FTP connections until a patch is available. As a temporary workaround, restrict access to anonymous FTP to minimize the risk of unlogged actions. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2004-1891

Produtos afetados

Irix

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2004-1891 · Nota de Segurança
• ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc · Aviso do Fabricante