| Definition Id: oval:org.mitre.oval:def:1333 |
Date: 2007-09-13 |
| Title: |
WU-FTPD "glob-*" Remote DoS Vulnerability (B.11.00) |
| Description: |
The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command. |
| Version: |
2 |
Class: |
vulnerability |
| Status: |
ACCEPTED |
Reference(s): |
CVE-2005-0256
|
| Family: |
unix |
| Platform(s): |
HP-UX 11 |
Product(s): |
ftpd |
| Definition Synopsis: |
- 700 Series or 800 Series OS Release 11.00
- 700 Series OS Release 11.00
- OR 800 Series OS Release 11.00
- AND INETSVCS-RUN without patch PHNE_34543 or later, OR WUFTP-26.INETSVCS-FTP with version less than B.11.11.01.006 is installed
|
