TNFTPD Multiple Signal Handler Remote Superuser Privilege Escalation

high Nessus Network Monitor Plugin ID 1854

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running TNFTPD, a port of the NetBSD FTP daemon. It is reported that this version of TNFTPD is vulnerable to multiple vulnerabilities in the signal handling functions. An attacker may remotely gain superuser privileges on the remote host. TNFTPD was formerly named lukemftpd.

Solution

Upgrade to tnftpd 20040810 or higher.

Plugin Details

Severity: High

ID: 1854

Family: FTP Servers

Published: 8/20/2004

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:luke_mewburn:tnftpd

Reference Information

CVE: CVE-2004-0794

BID: 10967

Detections

Analytics