PT-2003-1393 · Red Hat · Vsftpd+1

Published 2003-04-03 · Updated 2017-10-11 · CVE-2003-0135

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions vsftpd version in Red Hat Linux 9

Description The vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers, which prevents it from restricting access as intended.

Recommendations For vsftpd in Red Hat Linux 9, consider recompiling vsftpd with TCP wrappers support to restrict access as intended.

Fix

Related Identifiers

CVE-2003-0135

Affected Products

Red Hat

Vsftpd

References · 4

• http://securityfocus.com/bid/7253 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0135 · Security Note
• http://redhat.com/support/errata/RHSA-2003-084.html · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A634 · Note