TNFTPD Multiple Signal Handler Remote Superuser Privilege Escalation

High Nessus Network Monitor Plugin ID 1854

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running TNFTPD, a port of the NetBSD FTP daemon. It is reported that this version of TNFTPD is vulnerable to multiple vulnerabilities in the signal handling functions. An attacker may remotely gain superuser privileges on the remote host. TNFTPD was formerly named lukemftpd.

Solution

Upgrade to tnftpd 20040810 or higher.

Plugin Details

Severity: High

ID: 1854

Family: FTP Servers

Published: 2004/08/20

Modified: 2016/01/15

Dependencies: 1803, 1804, 3222

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Reference Information

CVE: CVE-2004-0794

BID: 10967