PT-2005-1781 · Novell · Mini Ftp Server+1

Francisco Amato · Publicado 2005-03-13 · Atualizado 2017-07-11 · CVE-2005-0746

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell iChain versions 2.2 through 2.3 SP2

Description The issue allows remote unauthenticated attackers to obtain the full path of the server. This is achieved via the PWD command in the Mini FTP server.

Recommendations For Novell iChain versions 2.2 through 2.3 SP2, consider restricting access to the Mini FTP server until a fix is available. As a temporary workaround, disabling the PWD command in the Mini FTP server may help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0746

Produtos afetados

Mini Ftp Server

Novell Ichain

Referências · 9

• http://secunia.com/advisories/14537 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19643 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0746 · Nota
• http://infobyte.com.ar/adv/ISR-03.html · Nota
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0746 · Nota de Segurança
• http://securityfocus.com/bid/12766 · Nota
• http://marc.info/?l=bugtraq&m=111091102023359&w=2 · Nota
• http://securitytracker.com/id?1013407 · Nota