TNFTPD Multiple Signal Handler Remote Superuser Privilege Escalation

high Nessus Network Monitor Plugin ID 1854

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running TNFTPD, a port of the NetBSD FTP daemon. It is reported that this version of TNFTPD is vulnerable to multiple vulnerabilities in the signal handling functions. An attacker may remotely gain superuser privileges on the remote host. TNFTPD was formerly named lukemftpd.

Solution

Upgrade to tnftpd 20040810 or higher.

Plugin Details

Severity: High

ID: 1854

Family: FTP Servers

Published: 8/20/2004

Updated: 3/6/2019

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:2.3:a:luke_mewburn:tnftpd:*:*:*:*:*:*:*:*

Reference Information

CVE: CVE-2004-0794

BID: 10967