From: Peter Novodvorsky <nidd@debian.org>
To: devel@linux.iplabs.ru
Subject: [devel] Fwd: wu-ftpd advisory
Date: Fri, 16 Feb 2001 07:34:49 +0300
Message-ID: <20010216073449.C22039@www.logic.ru> (raw)
[-- Attachment #1: Type: text/plain, Size: 1087 bytes --]
Привет!
> ------
> Vulnerability found on port ftp (21/tcp)
>
> You are running a version of wu-ftpd which is older or
> as old as version 2.6.0.
> These versions do not sanitize the user input properly
> and allow an intruder to execute arbitrary code through
> the command SITE EXEC.
>
> *** Note that Nessus could not log into this server
> *** so it could not determine whether the option SITE
> *** EXEC was activated or not, so this message may be
> *** a false positive
>
> Solution : upgrade to wu-ftpd 2.6.1
> Risk factor : High
> CVE : CVE-2000-0573
> ------
Блин, достали!
NIDD
--
/----------------------------------------------------------------------\
The Debian Project. Debian booth@Linux Expo Road Show coordinator.
Visit http://people.debian.org/~nidd/LERS-TODO.html if you're intrested.
------------------------------------------------------------------------
Real men don't take backups.
They put their source on a public FTP-server and let the world mirror it.
-- Linus Torvalds
[-- Attachment #2: Type: application/pgp-signature, Size: 240 bytes --]
reply other threads:[~2001-02-16 4:34 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20010216073449.C22039@www.logic.ru \
--to=nidd@debian.org \
--cc=devel@linux.iplabs.ru \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Team development discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/devel/0 devel/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 devel devel/ http://lore.altlinux.org/devel \
devel@altlinux.org devel@altlinux.ru devel@lists.altlinux.org devel@lists.altlinux.ru devel@linux.iplabs.ru mandrake-russian@linuxteam.iplabs.ru sisyphus@linuxteam.iplabs.ru
public-inbox-index devel
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.devel
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git