PT-2006-6468
CVE-2006-5789
·
تاريخ النشر
2006-11-07
·
تاريخ التحديث
2018-10-17
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions:
War FTP Daemon (WarFTPd) version 1.82.00-RC11
Description:
The issue allows remote authenticated users to cause a denial of service by sending a large number of "%s" format strings in various commands, including CWD, CDUP, DELE, NLST, LIST, SIZE, and possibly others.
Recommendations:
For War FTP Daemon (WarFTPd) version 1.82.00-RC11, consider restricting access to the affected commands as a temporary workaround until a patch is available. Avoid using the vulnerable commands in the FTP daemon until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾