Oval Definition:oval:org.cisecurity:def:563
Revision Date:2016-07-01Version:5
Title:DSA-357-1 -- wu-ftpd -- remote root exploit
Description:iSEC Security Research reports that wu-ftpd contains an off-by-one bug in the fb_realpath function which could be exploited by a logged-in user (local or anonymous) to gain root privileges. A demonstration exploit is reportedly available.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2003-0466
DSA-357-1
Platform(s):Debian GNU/Linux 3.0
Product(s):wu-ftpd
Definition Synopsis
  • Debian GNU/Linux 3.0 is installed
  • AND wu-ftpd is earlier than 0:2.6.2-3woody1
  • BACK