IPFilter FTP Proxy Unauthorized Access Vulnerability
BID:6010
Info
IPFilter FTP Proxy Unauthorized Access Vulnerability
| Bugtraq ID: | 6010 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 19 2002 12:00AM |
| Updated: | Oct 19 2002 12:00AM |
| Credit: | Announced by Darren Reed. |
| Vulnerable: |
NetBSD NetBSD 1.6 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 Darren Reed IPFilter 3.4.28 Darren Reed IPFilter 3.4.27 Darren Reed IPFilter 3.4.26 Darren Reed IPFilter 3.4.25 Darren Reed IPFilter 3.4.24 Darren Reed IPFilter 3.4.23 Darren Reed IPFilter 3.4.22 Darren Reed IPFilter 3.4.21 Darren Reed IPFilter 3.4.20 Darren Reed IPFilter 3.4.19 Darren Reed IPFilter 3.4.18 Darren Reed IPFilter 3.4.17 Darren Reed IPFilter 3.4.16 Darren Reed IPFilter 3.4.15 Darren Reed IPFilter 3.4.14 Darren Reed IPFilter 3.4.13 Darren Reed IPFilter 3.4.12 Darren Reed IPFilter 3.4.11 Darren Reed IPFilter 3.4.10 Darren Reed IPFilter 3.4.9 Darren Reed IPFilter 3.4.8 Darren Reed IPFilter 3.4.7 Darren Reed IPFilter 3.4.6 Darren Reed IPFilter 3.4.5 Darren Reed IPFilter 3.4.4 Darren Reed IPFilter 3.4.3 Darren Reed IPFilter 3.4.2 Darren Reed IPFilter 3.4.1 Darren Reed IPFilter 3.3.22 Darren Reed IPFilter 3.3.21 Darren Reed IPFilter 3.3.20 Darren Reed IPFilter 3.3.19 Darren Reed IPFilter 3.3.18 Darren Reed IPFilter 3.3.17 Darren Reed IPFilter 3.3.16 Darren Reed IPFilter 3.3.15 Darren Reed IPFilter 3.3.14 Darren Reed IPFilter 3.3.13 Darren Reed IPFilter 3.3.12 Darren Reed IPFilter 3.3.11 Darren Reed IPFilter 3.3.10 Darren Reed IPFilter 3.3.9 Darren Reed IPFilter 3.3.8 Darren Reed IPFilter 3.3.7 Darren Reed IPFilter 3.3.6 Darren Reed IPFilter 3.3.5 Darren Reed IPFilter 3.3.4 Darren Reed IPFilter 3.3.3 Darren Reed IPFilter 3.3.2 Darren Reed IPFilter 3.3.1 Darren Reed IPFilter 3.2.22 Darren Reed IPFilter 3.2.21 Darren Reed IPFilter 3.2.20 Darren Reed IPFilter 3.2.19 Darren Reed IPFilter 3.2.18 Darren Reed IPFilter 3.2.17 Darren Reed IPFilter 3.2.16 Darren Reed IPFilter 3.2.15 Darren Reed IPFilter 3.2.14 Darren Reed IPFilter 3.2.13 Darren Reed IPFilter 3.2.12 Darren Reed IPFilter 3.2.11 Darren Reed IPFilter 3.2.10 Darren Reed IPFilter 3.2.9 Darren Reed IPFilter 3.2.8 Darren Reed IPFilter 3.2.7 Darren Reed IPFilter 3.2.6 Darren Reed IPFilter 3.2.5 Darren Reed IPFilter 3.2.4 Darren Reed IPFilter 3.2.3 Darren Reed IPFilter 3.2.2 Darren Reed IPFilter 3.2.1 Darren Reed IPFilter 3.1.10 Darren Reed IPFilter 3.1.9 Darren Reed IPFilter 3.1.8 Darren Reed IPFilter 3.1.7 Darren Reed IPFilter 3.1.6 Darren Reed IPFilter 3.1.5 Darren Reed IPFilter 3.1.4 Darren Reed IPFilter 3.1.3 Darren Reed IPFilter 3.1.2 Darren Reed IPFilter 3.1.1 |
| Not Vulnerable: |
Darren Reed IPFilter 3.4.29 |
Discussion
IPFilter FTP Proxy Unauthorized Access Vulnerability
In versions of IPFilter prior to 3.4.29, the FTP proxy was vulnerable to a flaw that allowed for attackers to open ports on FTP servers under certain circumstances. Attackers may fool vulnerable versions of IPFilter into opening ports if a FTP server is in use that will echo text from a client back to the client.
In versions of IPFilter prior to 3.4.29, the FTP proxy was vulnerable to a flaw that allowed for attackers to open ports on FTP servers under certain circumstances. Attackers may fool vulnerable versions of IPFilter into opening ports if a FTP server is in use that will echo text from a client back to the client.
Exploit / POC
IPFilter FTP Proxy Unauthorized Access Vulnerability
There is no exploit code required.
There is no exploit code required.