Detections
Analytics

Debian DSA-087-1 : wu-ftpd - remote root exploit

high Nessus Plugin ID 14924

Synopsis

The remote Debian host is missing a security-related update.

Description

CORE ST reports that an exploit has been found for a bug in the wu-ftpd glob code (this is the code that handles filename wildcard expansion). Any logged in user (including anonymous FTP users) can exploit the bug to gain root privileges on the server.

Solution

This has been corrected in version 2.6.0-6 of the wu-ftpd package.

See Also

http://www.debian.org/security/2001/dsa-087

Plugin Details

Severity: High

ID: 14924

File Name: debian_DSA-087.nasl

Version: 1.25

Type: local

Agent: unix

Published: 9/29/2004

Updated: 1/4/2021

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.4

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:wu-ftpd, cpe:/o:debian:debian_linux:2.2

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/3/2001

Vulnerability Publication Date: 11/28/2001

Exploitable With

CANVAS (CANVAS)

Reference Information

CVE: CVE-2001-0550

BID: 3581

CERT: 886083

DSA: 087