* [devel] Fwd: wu-ftpd advisory
@ 2001-02-16 4:34 Peter Novodvorsky
0 siblings, 0 replies; only message in thread
From: Peter Novodvorsky @ 2001-02-16 4:34 UTC (permalink / raw)
To: devel
[-- Attachment #1: Type: text/plain, Size: 1087 bytes --]
Привет!
> ------
> Vulnerability found on port ftp (21/tcp)
>
> You are running a version of wu-ftpd which is older or
> as old as version 2.6.0.
> These versions do not sanitize the user input properly
> and allow an intruder to execute arbitrary code through
> the command SITE EXEC.
>
> *** Note that Nessus could not log into this server
> *** so it could not determine whether the option SITE
> *** EXEC was activated or not, so this message may be
> *** a false positive
>
> Solution : upgrade to wu-ftpd 2.6.1
> Risk factor : High
> CVE : CVE-2000-0573
> ------
Блин, достали!
NIDD
--
/----------------------------------------------------------------------\
The Debian Project. Debian booth@Linux Expo Road Show coordinator.
Visit http://people.debian.org/~nidd/LERS-TODO.html if you're intrested.
------------------------------------------------------------------------
Real men don't take backups.
They put their source on a public FTP-server and let the world mirror it.
-- Linus Torvalds
[-- Attachment #2: Type: application/pgp-signature, Size: 240 bytes --]
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2001-02-16 4:34 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2001-02-16 4:34 [devel] Fwd: wu-ftpd advisory Peter Novodvorsky
ALT Linux Team development discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/devel/0 devel/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 devel devel/ http://lore.altlinux.org/devel \
devel@altlinux.org devel@altlinux.ru devel@lists.altlinux.org devel@lists.altlinux.ru devel@linux.iplabs.ru mandrake-russian@linuxteam.iplabs.ru sisyphus@linuxteam.iplabs.ru
public-inbox-index devel
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.devel
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git