SSA-2003-259-03 : WU-FTPD Security Advisory

NASLDB: SSA-2003-259-03 : WU-FTPD Security Advisory

General

ID: 18726
Name: SSA-2003-259-03 : WU-FTPD Security Advisory

Summary: Checks for updated package(s) in /var/log/packages

Credits: –

Classification

Risk: –

CVSS: –
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: Slackware Local Security Checks
Type: Local

Description

Upgraded WU-FTPD packages are available for Slackware 9.0 and –
-current. These fix a problem where an attacker could use a
specially crafted filename in conjunction with WU-FTPD\‘s conversion
feature (mostly used to compress files, or produce tar archives) to
execute arbitrary commands on the server. In addition, a MAIL_ADMIN
which has been found to be insecure has been disabled.

We do not recommend deploying WU-FTPD in situations where security is
required.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: –
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2003/09/23
Plugin Release: 2005/07/13

Plugin

Version: 1.9
Filename: Slackware_SSA_2003-259-03.nasl
Filesize: 3250 bytes
MD5 Hash: a9bc78ccb40393bdfabb70a019e206c2

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/Slackware/release", "Host/Slackware/packages
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG