NASLDB: WU-FTPD SITE NEWER Command Memory Exhaustion DoS
General
ID: 10319
Name: WU-FTPD SITE NEWER Command Memory Exhaustion DoS
Summary: Checks if the remote FTP server accepts the SITE NEWER command
Credits: Tenable Network Security, Inc.
Classification
Risk: –
CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Temporal Vector: CVSS2#E:H/RL:U/RC:ND
Port: 21
Family: FTP
Type: Remote
Description
The remote WU-FTPD server accepts the command ‘SITE NEWER’.
Some WU-FTPD servers (and probably others) are vulnerable
to a resource exhaustion where an attacker may invoke
this command to use all the memory available on the server.
Exploiting
Exploit Available: –
Exploitability Ease: –
Sources
CVE: CVE-1999-0880
OSVDB: –
Bugtraq: –
scipID: –
Timeline
Vulnerability Disclosure: 1999/10/19
Patch Release: –
Plugin Release: 1999/10/29
Plugin
Version: 1.38
Filename: wu_ftpd_site_newer.nasl
Filesize: 2803 bytes
MD5 Hash: 021cc66efe56bdd898da36b9c41e4234
Identification: ftp/login
Require Keys: ftp/login", "ftp/wuftpd
Dependencies: "ftpserver_detect_type_nd_version.nasl", "ftp_anonymous.nasl"
Copyright: This script is Copyright© 1999-2011 Tenable Network Security, Inc.
- Letzte Plugins
- USN-1611-1 : thunderbird vulnerabilities
- USN-1610-1 : linux vulnerability
- USN-1609-1 : linux-ti-omap4 vulnerability
- SuSE 10 Security Update : PostgreSQL
- RHSA-2012-1364: bind97
- RHSA-2012-1363: bind
- RHSA-2012-1362: thunderbird
- RHSA-2012-1361: xulrunner
- Mandriva Linux Security Advisory : graphicsmagick
- FreeBSD : phpMyAdmin — Multiple XSS due to unescaped HTML output in Trigger, Procedure and Event pages and Fetching the version information from a non-SSL site is vulnerable to a MITM attack