How to Buy
This script is Copyright (C) 2005-2013 Tenable Network Security, Inc.
The remote Slackware host is missing a security update.
Upgraded WU-FTPD packages are available for Slackware 9.0 and -
-current. These fix a problem where an attacker could use a specially
crafted filename in conjunction with WU-FTPD's conversion feature
(mostly used to compress files, or produce tar archives) to execute
arbitrary commands on the server. In addition, a MAIL_ADMIN which has
been found to be insecure has been disabled. We do not recommend
deploying WU-FTPD in situations where security is required.
See also :
Update the affected wu-ftpd package.
Risk factor :
High / CVSS Base Score : 9.3
Family: Slackware Local Security Checks
Nessus Plugin ID: 18726 ()
CVE ID: CVE-2003-1327
Get Nessus Professional to scan unlimited IPs, run compliance checks & more
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.