WU-FTPD restricted-gid Directory Access Restriction Bypass

high Nessus Plugin ID 12098

Synopsis

The remote FTP server has an access restriction bypass vulnerability.

Description

The remote host is running wu-ftpd 2.6.2 or older.

There is a bug in this version which may allow an attacker to bypass the 'restricted-gid' feature and gain unauthorized access to otherwise restricted directories.

*** Nessus solely relied on the banner of the remote FTP server, so this might
*** be a false positive.

Solution

Upgrade to the latest version of the software.

See Also

http://www.nessus.org/u?f341b41b

Plugin Details

Severity: High

ID: 12098

File Name: wu_ftpd_restricted_gid_bypass.nasl

Version: 1.20

Type: remote

Family: FTP

Published: 3/14/2004

Updated: 8/7/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Required KB Items: Settings/ParanoidReport

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 3/9/2004

Reference Information

CVE: CVE-2004-0148

BID: 9832

RHSA: 2003:307-01

Secunia: 11055, 20168