PT-2008-3220 · Linux+3 · Nsswitch.Conf+5

Published 2008-08-12 · Updated 2017-09-29 · CVE-2008-1668

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions wu-ftpd version 2.4.2 ftpd in HP HP-UX B.11.11

Description The issue allows remote attackers to gain privileges in certain operating-system misconfigurations where PAM authentication can succeed even though no passwd entry is available for a user. This can occur when an FTP client is assigned uid 0, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information.

Recommendations For wu-ftpd version 2.4.2, ensure proper configuration of PAM authentication and nsswitch.conf to prevent unauthorized access. For ftpd in HP HP-UX B.11.11, verify that the system is correctly configured to handle LDAP accounts and passwd information to prevent privilege escalation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-1668

HPSBUX02356

Affected Products

Hp-Ux

Ldap

Pam

Ftpd

Nsswitch.Conf

Wu-Ftpd

References · 11

• http://vupen.com/english/advisories/2008/2364 · Vendor Advisory
• http://secunia.com/advisories/31471 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01525562 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1668 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1668 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5971 · Note
• http://securitytracker.com/id?1020682 · Note
• http://securityfocus.com/bid/30666 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44414 · Note
• http://openwall.com/lists/oss-security/2008/08/20/4 · Note
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTUyNTU2Mg%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Note