washington university wu-ftpd vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

Washington University Wu-ftpd 2.6.2

10

CVSSv2

Format string vulnerability in wu-ftp 2.6.1 and previous versions, when running with debug mode enabled, allows remote malicious users to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

Washington University Wu-ftpd 2.4.2 Beta18 Vr12 Washington University Wu-ftpd 2.4.2 Beta18 Vr13 Washington University Wu-ftpd 2.4.2 Beta18 Vr8 Washington University Wu-ftpd 2.4.2 Beta18 Vr9 Washington University Wu-ftpd 2.4.1 Washington University Wu-ftpd 2.4.2 Beta18 Washington University Wu-ftpd 2.4.2 Beta18 Vr4 Washington University Wu-ftpd 2.4.2 Beta18 Vr5 Washington University Wu-ftpd 2.4.2 Vr17 Washington University Wu-ftpd 2.5 Washington University Wu-ftpd 2.4.2 Beta18 Vr10 Washington University Wu-ftpd 2.4.2 Beta18 Vr11 Washington University Wu-ftpd 2.4.2 Beta18 Vr6 Washington University Wu-ftpd 2.4.2 Beta18 Vr7 Washington University Wu-ftpd 2.6 Washington University Wu-ftpd 2.4.2 Beta18 Vr14 Washington University Wu-ftpd 2.4.2 Beta18 Vr15 Washington University Wu-ftpd 2.4.2 Beta9 Washington University Wu-ftpd 2.4.2 Vr16

1 EDB exploit

10

CVSSv2

Buffer overflow in WU-FTPD and related FTP servers allows remote malicious users to gain root privileges via macro variables in a message file.

Caldera Openlinux 1.0 Bsdi Bsd Os 3.0 Bsdi Bsd Os 2.1

1 EDB exploit

10

CVSSv2

Buffer overflow in WU-FTPD and related FTP servers allows remote malicious users to gain root privileges via MAPPING_CHDIR.

Washington University Wu-ftpd 2.4.2 Beta18 Vr13 Washington University Wu-ftpd 2.4.2 Beta18 Vr14 Washington University Wu-ftpd 2.4.2 Beta18 Vr15 Washington University Wu-ftpd 2.4.2 Beta18 Vr4 Washington University Wu-ftpd 2.4.2 Beta18 Vr10 Washington University Wu-ftpd 2.4.2 Beta18 Vr12 Washington University Wu-ftpd 2.4.2 Beta18 Vr5 Washington University Wu-ftpd 2.4.2 Beta18 Vr8 Washington University Wu-ftpd 2.4.2 Vr16 Beroftpd Beroftpd 1.3.2 Beroftpd Beroftpd 1.3.3 Washington University Wu-ftpd 2.4.2 Vr17 Washington University Wu-ftpd 2.5 Beroftpd Beroftpd 1.3.4 Washington University Wu-ftpd 2.4.2 Beta18 Vr11 Washington University Wu-ftpd 2.4.2 Beta18 Vr6 Washington University Wu-ftpd 2.4.2 Beta18 Vr9

10

CVSSv2

Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.

Washington University Wu-ftpd 2.4

7.8

CVSSv2

ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote malicious users to cause a denial of service.

Washington University Wu-ftpd 2.6.2

7.6

CVSSv2

Race condition in wu-ftpd and BSDI ftpd allows remote malicious users to gain root access via the SITE EXEC command.

Washington University Wu-ftpd 2.4.1

7.5

CVSSv2

wu-ftpd 2.6.1 allows remote malicious users to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).

David Madore Ftpd-bsd 0.3.3 Washington University Wu-ftpd 2.5.0 Washington University Wu-ftpd 2.6.0 Washington University Wu-ftpd 2.6.1 David Madore Ftpd-bsd 0.3.2

2 EDB exploits1 Github repository

7.5

CVSSv2

Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.

Washington University Wu-ftpd 2.4 Washington University Wu-ftpd 2.6.0 Washington University Wu-ftpd 2.6.1

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook