Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow. 

The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow write access using Anonymous account or another account that is available to the attacker.

The following executable is vulnerable :

/usr/sbin/ftpd.

The remote host is missing AIX PTF U838600, which is related to the security of the package bos.net.tcp.client.

There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow. 

The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow write access using Anonymous account or another account that is available to the attacker.

The following executable is vulnerable :

/usr/sbin/ftpd.

The remote host is missing AIX PTF U838225, which is related to the security of the package bos.net.tcp.client.

There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow. 

The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow write access using Anonymous account or another account that is available to the attacker.

The following executable is vulnerable :

/usr/sbin/ftpd.

The remote host is missing AIX PTF U838020, which is related to the security of the package bos.net.tcp.client.

There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow. 

The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow write access using Anonymous account or another account that is available to the attacker.

The following executable is vulnerable :

/usr/sbin/ftpd.

ID	Name	Product	Family	Severity
63825	AIX 5.3 TL 12 : ftpd (IZ83276)	Nessus	AIX Local Security Checks	critical
63824	AIX 5.3 TL 11 : ftpd (IZ83275)	Nessus	AIX Local Security Checks	critical
63823	AIX 5.3 TL 10 : ftpd (IZ83274)	Nessus	AIX Local Security Checks	critical
63822	AIX 5.3 TL 9 : ftpd (IZ83252)	Nessus	AIX Local Security Checks	critical
52217	AIX 5.3 TL 12 : bos.net.tcp.client (U838600)	Nessus	AIX Local Security Checks	critical
52182	AIX 5.3 TL 10 : bos.net.tcp.client (U838225)	Nessus	AIX Local Security Checks	critical
52171	AIX 5.3 TL 11 : bos.net.tcp.client (U838020)	Nessus	AIX Local Security Checks	critical

Detections

Analytics

CVE-2010-3187

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical