Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

TNFTPD Multiple Signal Handler Remote Superuser Privilege Escalation

High

Synopsis

The remote host is vulnerable to multiple attack vectors.

Description

The remote host is running TNFTPD, a port of the NetBSD FTP daemon. It is reported that this version of TNFTPD is vulnerable to multiple vulnerabilities in the signal handling functions. An attacker may remotely gain superuser privileges on the remote host. TNFTPD was formerly named lukemftpd.

Solution

Upgrade to tnftpd 20040810 or higher.