Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access     restrictions via unknown vectors, related to deny_file parsing. (CVE-2015-1419)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access
    restrictions via unknown vectors, related to deny_file parsing. (CVE-2015-1419)

vsftpd has been updated to fix one security issue :

  - Config option deny_file was not handled correctly     (bnc#915522, bnc#900326). (CVE-2015-1419)

vsftpd was updated to fix one security issue.

This security issue was fixed :

  - CVE-2015-1419: vsftpd config option deny_file was not     handled correctly (bnc#915522).

Note: deny_file shouldn't be used to restrict access, as stated in the documentation. Please use more reliable methods.

ID	Name	Product	Family	Severity
254632	Linux Distros Unpatched Vulnerability : CVE-2015-1419	Nessus	Misc.	critical
401127	Alpine: multiple vsftpd packages: security update to 3.0.2-r8 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
401127	Alpine: multiple vsftpd packages: security update to 3.0.2-r8 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
81641	SuSE 11.3 Security Update : vsftpd (SAT Patch Number 10372)	Nessus	SuSE Local Security Checks	medium
81623	openSUSE Security Update : vsftpd (openSUSE-2015-197)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2015-1419

critical

Tenable Plugins

critical

high

high

medium

medium