PT-2005-4107 · Hewlett Packard · Hp-Ux
Publicado
2005-10-23
·
Atualizado
2017-10-11
·
CVE-2005-3296
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
HP-UX versions 10.20, B.11.00, B.11.11
Description
The issue allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.
Recommendations
For HP-UX versions 10.20, B.11.00, B.11.11, consider restricting access to the FTP server until a fix is available.
As a temporary workaround, consider disabling the FTP server functionality until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Hp-Ux