Detections
Analytics
WU-FTPD restricted-gid Directory Access Restriction Bypass
high Nessus Plugin ID 12098
Language:
Synopsis
The remote FTP server has an access restriction bypass vulnerability.Description
The remote host is running wu-ftpd 2.6.2 or older.There is a bug in this version which may allow an attacker to bypass the 'restricted-gid' feature and gain unauthorized access to otherwise restricted directories.
*** Nessus solely relied on the banner of the remote FTP server, so this might
*** be a false positive.
Solution
Upgrade to the latest version of the software.See Also
Plugin Details
Severity: High
ID: 12098
File Name: wu_ftpd_restricted_gid_bypass.nasl
Version: 1.20
Type: remote
Family: FTP
Published: 3/14/2004
Updated: 8/7/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: Settings/ParanoidReport
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 3/9/2004
Reference Information
CVE: CVE-2004-0148
BID: 9832
RHSA: 2003:307-01