HP-UX FTP Server Directory Listing Vulnerability

Bugtraq ID:	15138
Class:	Design Error
CVE:	CVE-2005-3296
Remote:	Yes
Local:	No
Published:	Oct 19 2005 12:00AM
Updated:	Oct 19 2005 12:00AM
Credit:	This issue was reported by Optyx <[email protected]>.
Vulnerable:	HP HP-UX 11.0 4 HP HP-UX 11.0 HP HP-UX 10.20 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00
Not Vulnerable:

HP-UX FTP Server Directory Listing Vulnerability

The FTP server included with HP-UX is prone to a vulnerability that may be leveraged by unauthenticated attackers to obtain directory listings.

An attacker does not require authentication credentials to carry out this attack. A successful attack can disclose sensitive information, which may aid in the exploitation of other vulnerabilities.

HP-UX FTP Server Directory Listing Vulnerability

An exploit is not required.

A proof of concept (hpux_ftpd_preauth_list.pm) as part of Metasploit Framework has been released.

• /data/vulnerabilities/exploits/hpux_ftpd_preauth_list.pm

HP-UX FTP Server Directory Listing Vulnerability

Solution:
HP has released security advisory HPSBUX02071 (SSRT051064 - HP-UX ftpd Remote Unauthorized Data Access) addressing this issue. Users are advised to see the referenced advisory for further information.

HP-UX FTP Server Directory Listing Vulnerability

References:

• HP-UX FTP Server Preauthentication Directory Listing (Metasploit)