Nessus Plugin #11371

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

BSD ftpd Single Byte Buffer Overflow

Family:

FTP

Category:

destructive_attack

Copyright:

This script is Copyright (C) 2003 Xue Yong Zhi

Summary:

Checks if the remote ftp can be buffer overflown

Version:

$Revision: 1.3 $

Cve_id:

CVE-2001-0053

Bugtraq_id:

2124

Xrefs:

-

Description:

One-byte buffer overflow in replydirname function
in BSD-based ftpd allows remote attackers to gain
root privileges.

Solution : upgrade your FTP server.
Consider removing directories writable by 'anonymous'.

Risk factor : High