BSD Based FTP Server Multiple glob Function Remote Overflow

critical Nessus Plugin ID 10648

Synopsis

The remote ftp server is affected by a buffer overflow vulnerability.

Description

It was possible to make the remote FTP server crash by creating a huge directory structure and then attempting to list list it using wildcards. This is usually known as the 'ftp glob overflow' attack. It may be possible to exploit this to execute arbitrary code.

Solution

Upgrade to the latest version of your FTP software.

Plugin Details

Severity: Critical

ID: 10648

File Name: ftp_glob_overflow.nasl

Version: 1.40

Type: remote

Family: FTP

Published: 4/16/2001

Updated: 7/11/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Required KB Items: ftp/login, ftp/writeable_dir

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 4/9/2001

Reference Information

CVE: CVE-2001-0247

BID: 2548

Detections

Analytics