Detections
Analytics
MS05-044: Vulnerability in the Windows FTP Client Could Allow File Transfer Location Tampering (905495)
low Nessus Plugin ID 19997
Language:
Synopsis
A flaw in the FTP client installed on the remote host could allow a rogue FTP server to write to arbitrary locations on the remote host.Description
The remote host contains a version of the Microsoft FTP client that contains a flaw in the way it handles FTP download. An attacker could exploit this flaw to modify the destination location for files downloaded via FTP.To exploit this flaw an attacker would need to set up a rogue FTP server and have a victim on the remote host connect to it and download a file manually using the affected client.
Solution
Microsoft has released a set of patches for Windows 2000, XP and 2003.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2005/ms05-044
Plugin Details
Severity: Low
ID: 19997
File Name: smb_nt_ms05-044.nasl
Version: 1.33
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 10/11/2005
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.4
CVSS v2
Risk Factor: Low
Base Score: 2.6
Temporal Score: 1.9
Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 10/11/2005
Vulnerability Publication Date: 10/11/2005
Reference Information
CVE: CVE-2005-2126
BID: 12160