Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.100282
Kategorie:FTP
Titel:WarFTPD Multiple Format String Vulnerabilities
Zusammenfassung:WarFTPd is prone to multiple remote format-string vulnerabilities; because the application fails to sanitize user-supplied input before passing it to a formatted-output function.
Beschreibung:Summary:
WarFTPd is prone to multiple remote format-string vulnerabilities
because the application fails to sanitize user-supplied input before passing it to a formatted-output function.

Vulnerability Impact:
An attacker can exploit these issues to crash the server and possibly
to execute arbitrary code within the context of the server, but this has not been confirmed.

Affected Software/OS:
WarFTPd 1.82.00-RC11 is reported vulnerable. Prior versions may be
vulnerable as well.

Solution:
Updates are available. Please see the references for details.

CVSS Score:
4.0

CVSS Vector:
AV:N/AC:L/Au:S/C:N/I:N/A:P

Querverweis: BugTraq ID: 20944
Common Vulnerability Exposure (CVE) ID: CVE-2006-5789
http://www.securityfocus.com/bid/20944
Bugtraq: 20061107 WarFTPd 1.82.00-RC11 Remote Denial Of Service (Google Search)
http://www.securityfocus.com/archive/1/450804/100/0/threaded
http://securitytracker.com/id?1017174
http://secunia.com/advisories/22755
http://securityreason.com/securityalert/1832
http://www.vupen.com/english/advisories/2006/4398
XForce ISS Database: warftpd-string-dos(30077)
https://exchange.xforce.ibmcloud.com/vulnerabilities/30077
CopyrightCopyright (C) 2009 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.