Sun Solaris 'in.ftpd' Long Command Handling Security Vulnerability

Bugtraq ID:	40320
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 21 2010 12:00AM
Updated:	May 21 2010 12:00AM
Credit:	Maksymilian Arciemowicz, SecurityReason
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris 2009.06
Not Vulnerable:

Sun Solaris 'in.ftpd' Long Command Handling Security Vulnerability

Sun Solaris 'in.ftpd' FTP server is prone to a security vulnerability that allows attackers to perform cross-site request-forgery attacks.

An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit a malicious site. This may lead to further attacks.

Sun Solaris 10 10/09 and OpenSolaris 2009.06 are vulnerable; other versions may be affected.

Sun Solaris 'in.ftpd' Long Command Handling Security Vulnerability

Attackers can exploit this issue by enticing an unsuspecting user into following a malicious link.

The following examples are available:

• /data/vulnerabilities/exploits/40320.txt

Sun Solaris 'in.ftpd' Long Command Handling Security Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris 'in.ftpd' Long Command Handling Security Vulnerability

References:

• OpenSolaris Homepage (Oracle)
  
• Solaris - Homepage (Oracle)
  
• Sun Solaris 10 ftpd Cross-site request forgery (Maksymilian Arciemowicz)