PT-2006-6468

CVE-2006-5789

·

تاريخ النشر

2006-11-07

·

تاريخ التحديث

2018-10-17

الوصف من

CVSS 2.0
4.0
متوسطة
المقاييسAV:N/AC:L/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions: War FTP Daemon (WarFTPd) version 1.82.00-RC11
Description: The issue allows remote authenticated users to cause a denial of service by sending a large number of "%s" format strings in various commands, including CWD, CDUP, DELE, NLST, LIST, SIZE, and possibly others.
Recommendations: For War FTP Daemon (WarFTPd) version 1.82.00-RC11, consider restricting access to the affected commands as a temporary workaround until a patch is available. Avoid using the vulnerable commands in the FTP daemon until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾