washington university wu-ftpd 2.6.1 vulnerabilities and exploits

(subscribe to this query)

Format string vulnerability in wu-ftp 2.6.1 and previous versions, when running with debug mode enabled, allows remote malicious users to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Washington University Wu-ftpd 2.4.2 Beta18 Vr12 Washington University Wu-ftpd 2.4.2 Beta18 Vr13 Washington University Wu-ftpd 2.4.2 Beta18 Vr8 Washington University Wu-ftpd 2.4.2 Beta18 Vr9 Washington University Wu-ftpd 2.4.1 Washington University Wu-ftpd 2.4.2 Beta18 Washington University Wu-ftpd 2.4.2 Beta18 Vr4 Washington University Wu-ftpd 2.4.2 Beta18 Vr5 Washington University Wu-ftpd 2.4.2 Vr17 Washington University Wu-ftpd 2.5 Washington University Wu-ftpd 2.4.2 Beta18 Vr10 Washington University Wu-ftpd 2.4.2 Beta18 Vr11 Washington University Wu-ftpd 2.4.2 Beta18 Vr6 Washington University Wu-ftpd 2.4.2 Beta18 Vr7 Washington University Wu-ftpd 2.6 Washington University Wu-ftpd 2.4.2 Beta18 Vr14 Washington University Wu-ftpd 2.4.2 Beta18 Vr15 Washington University Wu-ftpd 2.4.2 Beta9 Washington University Wu-ftpd 2.4.2 Vr16

1 EDB exploit

wu-ftpd 2.6.1 allows remote malicious users to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).

David Madore Ftpd-bsd 0.3.3 Washington University Wu-ftpd 2.5.0 Washington University Wu-ftpd 2.6.0 Washington University Wu-ftpd 2.6.1 David Madore Ftpd-bsd 0.3.2

2 EDB exploits1 Github repository

Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.

Washington University Wu-ftpd 2.4 Washington University Wu-ftpd 2.6.0 Washington University Wu-ftpd 2.6.1

wu-ftp with FTP conversion enabled allows an malicious user to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.

Millenux Gmbh Anonftp 2.8.1 University Of Washington Wu-ftpd 2.5.0 University Of Washington Wu-ftpd 2.6.0 University Of Washington Wu-ftpd 2.4.2 Redhat Linux 6.1 Redhat Linux 5.2 Redhat Linux 6.0

1 EDB exploit

wu-ftpd 2.6.2 and previous versions, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

Sgi Propack 2.3 Sgi Propack 2.4 Washington University Wu-ftpd 2.4.2 Beta18 Vr14 Washington University Wu-ftpd 2.4.2 Beta18 Vr15 Washington University Wu-ftpd 2.4.2 Beta2 Washington University Wu-ftpd 2.4.2 Vr16 Washington University Wu-ftpd 2.4.2 Beta18 Vr10 Washington University Wu-ftpd 2.4.2 Beta18 Vr11 Washington University Wu-ftpd 2.4.2 Beta18 Vr6 Washington University Wu-ftpd 2.4.2 Beta18 Vr12 Washington University Wu-ftpd 2.4.2 Beta18 Vr13 Washington University Wu-ftpd 2.4.2 Beta18 Vr8 Washington University Wu-ftpd 2.4.2 Beta18 Vr9 Washington University Wu-ftpd 2.6.2 Washington University Wu-ftpd 2.4.2 Beta18 Vr7 Washington University Wu-ftpd 2.6.0 Washington University Wu-ftpd 2.6.1 Washington University Wu-ftpd 2.4.1 Washington University Wu-ftpd 2.4.2 Beta18 Washington University Wu-ftpd 2.4.2 Beta18 Vr4 Washington University Wu-ftpd 2.4.2 Beta18 Vr5 Washington University Wu-ftpd 2.4.2 Vr17

The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote malicious users to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.

Washington University Wu-ftpd 2.6.1 Washington University Wu-ftpd 2.6.2

1 EDB exploit

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

1 EDB exploit

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook