PT-2004-1354 · Washington University · Wu-Ftpd

CVE-2004-0185

·

Publicado

2004-03-15

·

Atualizado

2024-02-14

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions wu-ftpd version 2.6.2
Description The issue is related to a buffer overflow in the skey challenge function, which can be triggered by a remote attacker sending a s/key request with a long name. This could lead to a denial of service and potentially allow the execution of arbitrary code.
Recommendations For wu-ftpd version 2.6.2, consider disabling the s/key authentication mechanism until a patch is available to prevent potential exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2004-0185
DSA-457

Produtos afetados

Wu-Ftpd