Published: 15/03/2004 Updated: 14/02/2024

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

Vulnerable Product	Search on Vulmon	Subscribe to Product
washington university wu-ftpd 2.6.2

Two vulnerabilities were discovered in wu-ftpd: CAN-2004-0148 Glenn Stewart discovered that users could bypass the directory access restrictions imposed by the restricted-gid option by changing the permissions on their home directory On a subsequent login, when access to the user's home directory was denied, wu-ftpd would fall back to the ro ...

NVD-CWE-Other http://www.securiteam.com/unixfocus/6X00Q1P8KC.html ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patch http://www.debian.org/security/2004/dsa-457 http://www.redhat.com/support/errata/RHSA-2004-096.html http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txt http://www.securityfocus.com/bid/8893 https://exchange.xforce.ibmcloud.com/vulnerabilities/13518 https://nvd.nist.gov https://www.debian.org/security/./dsa-457

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-0185

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect