ID

11371

Nom

BSD ftpd Single Byte Buffer Overflow

Auteurs

This script is Copyright (C) 2003-2009 Tenable Network Security, Inc.

Catégorie

FTP

Action

destructive_attack

Résumé

Checks if the remote ftpd can be buffer overflown

Description

Synopsis : The remote ftp server is affected by a buffer overflow vulnerability. Description : The remote ftp daemon contains a flaw in the 'replydirname()' function which allows an attacker to write a null byte beyond the boundaries of the local buffer. An attacker can exploit this to gain root access. See also : http://www.openbsd.org/advisories/ftpd_replydirname.txt ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/005_ftpd.patch Solution : Apply the fix from the references above. Risk factor : Critical / CVSS Base Score : 10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

EFTP Newline String Handling Remote DoS
Multiple FTP Server Command Handling Overflow
WFTP Unpassworded Guest Account
Windows FTP Server NULL Administrator Password
GlobalSCAPE Secure FTP Server (gsftps) Custom Command Long Parameter DoS
Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities (uncredentialed check)
Golden FTP Server APPE Command Remote Overflow
TYPSoft FTP Server LIST Command Traversal Arbitrary Directory Listing
EFTP .lnk File Handling Remote Overflow
Multiple FTP Server setproctitle Function Arbitrary Command Execution
Home FTP Server Multiple Vulnerabilities
bftpd Multiple Command Remote Overflow
Wyse Device Manager Default FTP Account
WU-FTPD site_exec() Function Remote Format String
FTPshell Server 3.38 Malformed PORT/QUIT DoS
WU-FTPD fileutils/coreutils ls -w Argument Memory Consumption DoS
ProFTPD 1.2.0rc2 Malformed cwd Command Format String
XM Easy FTP Server USER Command Buffer Overflow
PFTP Default Unpassworded Account
TYPSoft FTP Server Crafted RETR Command DoS
Zaurus PDA FTP Server Unpassworded root Account
Crob FTP Server user Field Remote Format String
TYPSoft FTP Server Malformed STOR / RETR Command DoS
Easy File Sharing FTP Server PASS Command Overflow
HP-UX ftpd glob() Expansion STAT Buffer Overflow
ProFTPD Multiple Remote Overflows (palmetto)
WarFTPd CWD Command Remote DoS
FTP Server Traversal Arbitrary File Access
WS_FTP Server Path Parsing Remote DoS
HP-UX ftpd PAM Authentication Configuration Weakness Authentication Bypass
Broker FTP Multiple Command Arbitrary File/Directory Manipulation
WFTPD Out of Sequence RNTO Command Remote DoS
PlatinumFTPServer username Multiple Connection Handling Remote Format String
RobotFTP Pre-authentication Command Execution DoS
WarFTPd USER/PASS Command Remote Overflow
WS_FTP Server Multiple Command Remote Overflow DoS
SlimFTPd Multiple Command Handling Overflow
Gene6 FTP Server Multiple Command Remote Overflows
BSD Based FTP Server Multiple glob Function Remote Overflow
FTP Supports Clear Text Authentication
EFTP Multiple Command Traversal Arbitrary Directory Listing
MS02-018: Microsoft IIS FTP Status Request DoS (uncredentialed check)
eScan Server Management Console (eserv.exe) FTP Server Arbitrary File Download
WarFTPd dir Command Traversal Arbitrary Directory Listing
Blac'oon FTP Login Error Message User Enumeration
WU-FTPD rnfr File Overwrite
Ipswitch WS_FTP Server Version Detection (credentialed check)
FTP Server No Command Accepted (possible backdoor/proxy)
Multiple FTP Server quote stat Command Traversal Arbitrary Directory Access
FTP Server Copyrighted Material Present
glFTPd Multiple Script ZIP File Handling Arbitrary File / Directory Access
Cerberus FTP Server Command Processing DoS
WebWeaver FTP Aborted RETR Command Remote DoS
RaidenFTPD urlget Command Traversal Arbitrary File Access
3Com 3CServer/3CDaemon FTP Server Multiple Vulnerabilities (OF, FS, PD, DoS)
Serv-U < 9.0.0.1
Multiple FTPD glob Command Arbitrary Command Execution
FTPd CWD Command Account Enumeration
Serv-U 7.x < 7.2.0.1 SFTP Directory Creation Logging DoS
oftpd PORT Command Remote DoS
NETFile FTP/Web Server FTP Bounce Attack
WU-FTPD Debug Mode Client Hostname Remote Format String
ProFTPD < 1.3.0rc2 Multiple Remote Format Strings
FTP Server Bad Command Sequence Accepted (possible backdoor/proxy)
Crob FTP Server Connection Saturation Remote DoS
ST FTP Service Arbitrary File/Directory Access
WFTPD APPE Command Buffer Overflow
WU-FTPD Multiple Vulnerabilities (OF, Priv Esc)
GlobalSCAPE Secure FTP Server User Input Overflow
4D WebSTAR Symlink Privilege Escalation
WU-FTPD wu_fnmatch() Function File Globbing Remote DoS
ProFTPD src/support.c sreplace Function Remote Overflow
FTP Server root Directory .rhosts File Present
Golden FTP Server Pro GET Traversal Arbitrary File Access
FTP Privileged Port Bounce Scan
WS_FTP Server SITE CPWD Command Remote Overflow
ProFTPD STAT Command Remote DoS
Vermillion FTPD Long CWD Commands DoS
DreamFTP Server username Remote Format String
WU-FTPD Unspecified Security Issue
PlanetFileServer mshftp.dll Data Processing Remote Overflow
ArGoSoft FTP Server USER Command Account Enumeration
HP-UX FTP Daemon PASS Command Remote Format String
Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities
WS_FTP Server Multiple Vulnerabilities (Bounce, PASV Hijacking)
ProFTPD on Debian Linux postinst Installation Privilege Escalation
WU-FTPD ABOR Command Arbitrary File Access
ArGoSoft FTP Server < 1.4.2.8 Multiple .LNK File Handling Vulnerabilities
Multiple Vendor FTP Multiple PASV Command Port Exhaustion DoS
Multiple Vendor FTPD on Windows Floppy Request CPU Consumption DoS
ProFTPD 1.2.0pre4 mkdir Command Directory Name Handling Remote Overflow
WU-FTPD MAIL_ADMIN Function Remote Overflow
Titan FTP Server SITE WHO Command Resource Consumption DoS
WS_FTP Multiple Command Long Argument Overflow
Multiple Vendor Embedded FTP Service Any Username Authentication Bypass
Ability FTP Server Multiple Command Remote Buffer Overflows
Serv-U 7.x < 7.3.0.1 Multiple Remote Vulnerabilities (DoS, Traversal)
Serv-U CWD Command Overflow
FTP Serv-U 4.x-5.x STOU Command MS-DOS Argument Remote DoS
SlimFTPd Username/Password Overflow Remote DoS
Serv-U < 2.5e Multiple Vulnerabilities (OF, Path Disc)
ArGoSoft FTP Server .lnk Shortcut Upload Arbitrary File Manipulation
ArGoSoft FTP Server XCWD Remote Overflow
FTP Server Any Command Accepted (possible backdoor/proxy)
Farmers WIFE FTP Server Multiple Command Traversal Arbitrary File Creation
Serv-U SITE CHMOD Command Multiple Vulnerabilities
TYPSoft FTP Server 1.10 Invalid Path Request DoS
BlackJumboDog FTP Server Multiple Command Overflow
Golden FTP Server Pro Multiple Command Remote Overflow DoS
Inframail FTP Server NLST Command Remote Overflow
Serv-U 7.x < 7.4.0.0 Multiple Command Remote DoS
WFTPD 2.41 rc11 Unauthenticated MLST Command Remote DoS
CesarFTP Multiple Vulnerabilities (OF, File Access, more)
Multiple FTP Server Traversal Arbitrary File/Directory Access
Titan FTP Server Multiple Command Remote Overflow
WU-FTPD QUOTE PASV Forced Core Dump Information Disclosure
HP-UX FTPD REST Command Remote Arbitrary Memory Disclosure
smallftpd 1.0.3 Crafted Traversal Sequence Remote DoS
bftpd NLST Command Output Format String
WU-FTPD restricted-gid Directory Access Restriction Bypass
Serv-U MDTM Command Overflow
OpenFTPD SITE MSG FTP Command Format String
Intersoft NetTerm Netftpd USER Command Remote Overflow
ProFTPD Auth API Multiple Auth Module Authentication Bypass
Serv-U < 8.0.0.1 Multiple Vulnerabilities (DoS, Traversal)
3Com NBX ftpd CEL Command Remote Overflow (1)
XAMPP Default FTP Account
3Com NBX ftpd CEL Command Remote Overflow (2)
NGC Active FTPServer 2002 Multiple Command Remote DoS
WFTP 3.21 Multiple Vulnerabilities (OF, DoS)
SunFTP Multiple Command Traversal Arbitrary File Creation/Deletion
DataWizard FTPXQ Default Accounts
SunFTP GET Request Remote Overflow
GoodTech FTP Server Connection Saturation DoS
freeFTPd Multiple Command Malformed Argument Remote DoS
Golden FTP Server <= 2.60 LS Command Traversal Information Disclosure
Anonymous FTP Enabled
Sambar FTP Server Malformed SIZE Command DoS
AIX FTPd libc Library Remote Buffer Overflow
SurgeFTP LEAK Command Remote DoS
Dragon FTP USER Command Remote Overflow
Solaris FTP Daemon CWD Command Account Enumeration
Hummingbird Connectivity FTP Service XCWD Command Overflow
QNX RTP FTP stat Command strtok() Function Overflow
Windows NT FTP guest Account Present
Xlight FTP Server Multiple Remote Overflows
ProFTPD mkdir Buffer Overflow
4D WebStar Pre-authentication FTP Overflow
smallftpd Multiple Vulnerabilities (Traversal, DoS)
PostgreSQL Authentication Module (mod_sql) for ProFTPD USER Name Variable SQL Injection
Sami FTP Server Multiple DoS
Xlight FTP Server Authentication SQL Injection Vulnerability
GuildFTPd Traversal Arbitrary File Enumeration
Serv-U 2.5e Null Byte Saturation DoS
BSD ftpd Single Byte Buffer Overflow
FTP Writable Directories
Hummingbird InetD FTP Component (ftpdw.exe) Command Overflow
WS_FTP Server Multiple Vulnerabilities (OF, DoS, Cmd Exec)
WS_FTP Server CWD Command Remote DoS
EFTP Nonexistent File Request Installation Directory Disclosure
ProFTPD NLST Command Argument Handling Remote Overflow
Cerberus FTP Server Detection
FTP Server root Directory .forward File Present
Serv-U CD Command Encoded Traversal Arbitrary File/Directory Access
Multiple FTP CWD ~root Command Privilege Escalation
FileZilla FTP Server Multiple DoS
WU-FTPD SITE NEWER Command Memory Exhaustion DoS
PlatinumFTPServer Multiple Vulnerabilities
WU-FTPD S/KEY Authentication ftpd.c skey_challenge Function Remote Overflow
WS_FTP Server STAT Command Remote Overflow
GuildFTPd Long SITE Command Overflow
Titan FTP Server quote stat Command Traversal Arbitrary Directory Listing
FTP Service AUTH TLS Command Support
Anonymous FTP Writeable root Directory
WU-FTPD SITE EXEC Arbitrary Local Command Execution
Crob FTP Server < 3.6.1 build 263 Multiple Vulnerabilities
ArGoSoft FTP Server DELE Command Remote Buffer Overrun
RaidenFTPD Multiple Command Traversal Arbitrary File Access
ProFTPD File Transfer Newline Character Overflow
WarFTPd CWD/MKD Command Overflow
ArGoSoft FTP Server RNTO Command Remote Buffer Overflow
ProFTPD Command Truncation Cross-Site Request Forgery
Ariel FTP Server Default document Account
NetComm NB1300 Router FTP Default Admin Account
Multiple FTP Server QUOTE CWD Command Home Path Disclosure
MS09-053: Microsoft IIS FTPd NLST Command Remote Buffer Overflow (975191) (uncredentialed check)
TYPSoft FTP Server Empty Username DoS
WU-FTPD fb_realpath() Function Off-by-one Overflow
Windows 98 FTP MS/DOS Device Name Request DoS
TYPSoft FTP Server Crafted RETR Command Sequence Remote DoS
Microsoft IIS FTP Server NLST Command Overflow DoS
ProFTPD Login Timing Account Name Enumeration