washington university wu-ftpd 2.6.2 vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

Washington University Wu-ftpd 2.6.2

7.8

CVSSv2

ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote malicious users to cause a denial of service.

Washington University Wu-ftpd 2.6.2

7.5

CVSSv2

wu-ftp with FTP conversion enabled allows an malicious user to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.

Millenux Gmbh Anonftp 2.8.1 University Of Washington Wu-ftpd 2.5.0 University Of Washington Wu-ftpd 2.6.0 University Of Washington Wu-ftpd 2.4.2 Redhat Linux 6.1 Redhat Linux 5.2 Redhat Linux 6.0

1 EDB exploit

7.2

CVSSv2

wu-ftpd 2.6.2 and previous versions, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

Sgi Propack 2.3 Sgi Propack 2.4 Washington University Wu-ftpd 2.4.2 Beta18 Vr14 Washington University Wu-ftpd 2.4.2 Beta18 Vr15 Washington University Wu-ftpd 2.4.2 Beta2 Washington University Wu-ftpd 2.4.2 Vr16 Washington University Wu-ftpd 2.4.2 Beta18 Vr10 Washington University Wu-ftpd 2.4.2 Beta18 Vr11 Washington University Wu-ftpd 2.4.2 Beta18 Vr6 Washington University Wu-ftpd 2.4.2 Beta18 Vr12 Washington University Wu-ftpd 2.4.2 Beta18 Vr13 Washington University Wu-ftpd 2.4.2 Beta18 Vr8 Washington University Wu-ftpd 2.4.2 Beta18 Vr9 Washington University Wu-ftpd 2.6.2 Washington University Wu-ftpd 2.4.2 Beta18 Vr7 Washington University Wu-ftpd 2.6.0 Washington University Wu-ftpd 2.6.1 Washington University Wu-ftpd 2.4.1 Washington University Wu-ftpd 2.4.2 Beta18 Washington University Wu-ftpd 2.4.2 Beta18 Vr4 Washington University Wu-ftpd 2.4.2 Beta18 Vr5 Washington University Wu-ftpd 2.4.2 Vr17

5

CVSSv2

The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote malicious users to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.

Washington University Wu-ftpd 2.6.1 Washington University Wu-ftpd 2.6.2

1 EDB exploit

5

CVSSv2

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

1 EDB exploit

2.1

CVSSv2

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook