Caldera Open Unix / UnixWare ftpd PASV Mode Data Channel Hijacking Vulnerability
BID:4895
Info
Caldera Open Unix / UnixWare ftpd PASV Mode Data Channel Hijacking Vulnerability
| Bugtraq ID: | 4895 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 30 2002 12:00AM |
| Updated: | May 30 2002 12:00AM |
| Credit: | Reported in Caldera Security Advisory CSSA-2002-SCO.23. |
| Vulnerable: |
Caldera UnixWare 7.1.1 Caldera OpenUnix 8.0 |
| Not Vulnerable: | |
Solution / Fix
Caldera Open Unix / UnixWare ftpd PASV Mode Data Channel Hijacking Vulnerability
Solution:
A patch is available:
Caldera UnixWare 7.1.1
Caldera OpenUnix 8.0
Solution:
A patch is available:
Caldera UnixWare 7.1.1
-
Caldera erg501602b.pkg.Z
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.23/erg5016 02b.pkg.Z
Caldera OpenUnix 8.0
-
Caldera erg501602b.pkg.Z
ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.23/erg5016 02b.pkg.Z
References
Caldera Open Unix / UnixWare ftpd PASV Mode Data Channel Hijacking Vulnerability
References:
References:
- Vulnerability Note VU#2558 (CERT)