PT-2005-4107 · Hewlett Packard · Hp-Ux

Published

2005-10-23

·

Updated

2017-10-11

·

CVE-2005-3296

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HP-UX versions 10.20, B.11.00, B.11.11
Description The issue allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.
Recommendations For HP-UX versions 10.20, B.11.00, B.11.11, consider restricting access to the FTP server until a fix is available. As a temporary workaround, consider disabling the FTP server functionality until a patch is available.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2005-3296

Affected Products

Hp-Ux