Nessus Plugin #14924

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA087] DSA-087-1 wu-ftpd

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-087-1 wu-ftpd

Version:

$Revision: 1.4 $

Cve_id:

CVE-2001-0550

Bugtraq_id:

3581

Xrefs:

DSA:087, CERT:886083

Description:

CORE ST reports that an exploit has been found for a bug in the wu-ftpd
glob code (this is the code that handles filename wildcard expansion).
Any logged in user (including anonymous FTP users) can exploit the bug
to gain root privileges on the server.

This has been corrected in version 2.6.0-6 of the wu-ftpd package.



Solution : http://www.debian.org/security/2001/dsa-087
Risk factor : High