Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.

s700_800 11.04 (VVOS) ftpd(1M) and ftp(1) patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running ftpd, where a buffer overflow in ftpd     could be remotely exploited to allow an unauthorized     user to gain privileged access. (HPSBUX01118 SSRT4883)

  - A potential security vulnerability has been identified     with HP-UX running ftp where the vulnerability could be     exploited remotely to allow unauthorized access.
    (HPSBUX01050 SSRT3456)

s700_800 11.04 (VVOS) ftpd(1M) and ftp(1) patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential vulnerability has been identified with HP-UX     running ftpd. The vulnerability could be exploited by a     remote unauthenticated user to list directories with the     privileges of the root user. (HPSBUX02071 SSRT051064)

  - ftpd and ftp incorrectly manage buffers. (HPSBUX00162     SSRT4883)

s700_800 11.00 ftpd(1M) and ftp(1) patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running ftp where the vulnerability could be     exploited remotely to allow unauthorized access.
    (HPSBUX01050 SSRT3456)

  - A potential security vulnerability has been identified     with HP-UX running ftpd, where a buffer overflow in ftpd     could be remotely exploited to allow an unauthorized     user to gain privileged access. (HPSBUX01118 SSRT4883)

  - The wu-ftpd program is potentially vulnerable to a     buffer overflow. (HPSBUX00277 SSRT3606)

s700_800 11.11 ftpd(1M) and ftp(1) patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - The wu-ftpd program is potentially vulnerable to a     buffer overflow. (HPSBUX00277 SSRT3606)

  - A potential security vulnerability has been identified     with HP-UX running ftpd, where a buffer overflow in ftpd     could be remotely exploited to allow an unauthorized     user to gain privileged access. (HPSBUX01118 SSRT4883)

  - A potential security vulnerability has been identified     with HP-UX running ftp where the vulnerability could be     exploited remotely to allow unauthorized access.
    (HPSBUX01050 SSRT3456)

s700_800 11.22 ftpd(1M) and ftp(1) patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential vulnerability has been identified with HP-UX     running ftpd where the vulnerability could be exploited     to allow a remote authorized user unauthorized access to     files. (HPSBUX01119 SSRT4694)

  - A potential security vulnerability has been identified     with HP-UX running ftp where the vulnerability could be     exploited remotely to allow unauthorized access.
    (HPSBUX01050 SSRT3456)

  - The wu-ftpd program is potentially vulnerable to a     buffer overflow. (HPSBUX00277 SSRT3606)

  - A potential security vulnerability has been identified     with HP-UX running ftpd, where a buffer overflow in ftpd     could be remotely exploited to allow an unauthorized     user to gain privileged access. (HPSBUX01118 SSRT4883)

  - A potential vulnerability has been identified with HP-UX     running wu-ftpd with the restricted gid option enabled     where the vulnerability could be exploited by a local     user to gain unauthorized access to files. (HPSBUX01059     SSRT4704)

s700_800 11.00 ftpd(1M) and ftp(1) patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential vulnerability has been identified with HP-UX     running ftpd. The vulnerability could be exploited by a     remote unauthenticated user to list directories with the     privileges of the root user. (HPSBUX02071 SSRT051064)

  - ftpd and ftp incorrectly manage buffers. (HPSBUX00162     SSRT4883)

s700_800 11.11 ftpd(1M) patch : 

ftpd and ftp incorrectly manage buffers.

ID	Name	Product	Family	Severity
16971	HP-UX PHNE_31034 : s700_800 11.04 (VVOS) ftpd(1M) and ftp(1) patch	Nessus	HP-UX Local Security Checks	high
16931	HP-UX PHNE_24395 : s700_800 11.04 (VVOS) ftpd(1M) and ftp(1) patch	Nessus	HP-UX Local Security Checks	critical
16909	HP-UX PHNE_29460 : s700_800 11.00 ftpd(1M) and ftp(1) patch	Nessus	HP-UX Local Security Checks	critical
16908	HP-UX PHNE_29461 : s700_800 11.11 ftpd(1M) and ftp(1) patch	Nessus	HP-UX Local Security Checks	critical
16907	HP-UX PHNE_29462 : s700_800 11.22 ftpd(1M) and ftp(1) patch	Nessus	HP-UX Local Security Checks	critical
16577	HP-UX PHNE_23949 : s700_800 11.00 ftpd(1M) and ftp(1) patch	Nessus	HP-UX Local Security Checks	critical
16576	HP-UX PHNE_23950 : HP-UX Running ftp and ftpd, Remote Unauthorized Access (HPSBUX00162 SSRT4883 rev.4)	Nessus	HP-UX Local Security Checks	high

Detections

Analytics

CVE-2004-1332

critical

Tenable Plugins

high

critical

critical

critical

critical

critical

high