Multiple Vendor Wu-Ftpd Buffer Overflow Vulnerability
BID:599
Info
Multiple Vendor Wu-Ftpd Buffer Overflow Vulnerability
| Bugtraq ID: | 599 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Aug 22 1999 12:00AM |
| Updated: | Aug 22 1999 12:00AM |
| Credit: | First posted to BugTraq by Michal Zalewski on August 22, 1999. |
| Vulnerable: |
Washington University wu-ftpd 2.5 .0 Washington University wu-ftpd 2.4.2 VR17 Washington University wu-ftpd 2.4.2 VR16 Washington University wu-ftpd 2.4.2 (beta 18) VR9 Washington University wu-ftpd 2.4.2 (beta 18) VR8 Washington University wu-ftpd 2.4.2 (beta 18) VR7 Washington University wu-ftpd 2.4.2 (beta 18) VR6 Washington University wu-ftpd 2.4.2 (beta 18) VR5 Washington University wu-ftpd 2.4.2 (beta 18) VR4 Washington University wu-ftpd 2.4.2 (beta 18) VR15 Washington University wu-ftpd 2.4.2 (beta 18) VR14 Washington University wu-ftpd 2.4.2 (beta 18) VR13 Washington University wu-ftpd 2.4.2 (beta 18) VR12 Washington University wu-ftpd 2.4.2 (beta 18) VR11 Washington University wu-ftpd 2.4.2 (beta 18) VR10 Linux ftpd 0.16 BeroFTPD BeroFTPD 1.3.4 BeroFTPD BeroFTPD 1.3.3 BeroFTPD BeroFTPD 1.3.2 |
| Not Vulnerable: |
Washington University wu-ftpd 2.6 .0 SuSE Linux 6.1 NcFTP Software NcFTPD 2.5 NcFTP Software NcFTPD 2.4.1 NcFTP Software NcFTPD 2.4 NcFTP Software NcFTPD 2.3.5 NcFTP Software NcFTPD 2.3.4 NcFTP Software NcFTPD 2.3.3 NcFTP Software NcFTPD 2.3.2 NcFTP Software NcFTPD 2.3.1 NcFTP Software NcFTPD 2.3 NcFTP Software NcFTPD 2.2.2 Linux ndis-wrapper 1.28 RC2 Academ wu-ftpd 2.4.2 |
Discussion
Exploit / POC
Multiple Vendor Wu-Ftpd Buffer Overflow Vulnerability
It is rumored that there is an exploit in use and in circulation among hackers.
It is rumored that there is an exploit in use and in circulation among hackers.
Solution / Fix
Multiple Vendor Wu-Ftpd Buffer Overflow Vulnerability
Solution:
The WU-FTPD Development Group has made the following patch available for WU-FTPD 2.5.0:
ftp://ftp.wu-ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0/mapped.path.overrun.patch
Users of BeroFTPD 1.3.4 can apply the same patch.
Solution:
The WU-FTPD Development Group has made the following patch available for WU-FTPD 2.5.0:
ftp://ftp.wu-ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0/mapped.path.overrun.patch
Users of BeroFTPD 1.3.4 can apply the same patch.