AIX 5.3 TL 10 : ftpd (IZ83274)

Critical Nessus Plugin ID 63823

Synopsis

The remote AIX host is missing a security patch.

Description

There is a buffer overflow vulnerability in the ftp server. By issuing an overly long NLST command, an attacker may cause a buffer overflow.

The successful exploitation of this vulnerability allows a remote attacker to get the DES encrypted user hashes off the server if FTP is configured to allow write access using Anonymous account or another account that is available to the attacker.

The following executable is vulnerable :

/usr/sbin/ftpd.

Solution

Install the appropriate interim fix.

See Also

http://www.exploit-db.com/exploits/14456/

http://www.exploit-db.com/exploits/14409/

http://aix.software.ibm.com/aix/efixes/security/ftpd_advisory.asc

Plugin Details

Severity: Critical

ID: 63823

File Name: aix_IZ83274.nasl

Version: $Revision: 1.3 $

Type: local

Published: 2013/01/24

Modified: 2013/11/27

Dependencies: 12634

Risk Information

Risk Factor: Critical

CVSSv2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:ibm:aix:5.3

Required KB Items: Host/AIX/lslpp, Host/local_checks_enabled, Host/AIX/version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2010/08/25

Vulnerability Publication Date: 2010/08/25

Reference Information

CVE: CVE-2010-3187