Vulnerability Name: | CCN-494 | ||||||
Published: | 1995-11-01 | ||||||
Updated: | 1995-11-01 | ||||||
Summary: | A vulnerability identified in some versions of wu-ftpd could allow users with non-anonymous FTP access to a system to gain root privileges. A flaw in the way the SITE EXEC command is implemented in vulnerable versions of wu-ftp could allow attackers to execute arbitrary commands with root privileges. | ||||||
CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||
CVSS v2 Severity: | 10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
| ||||||
Vulnerability Consequences: | Gain Privileges | ||||||
References: | Source: CCN Type: CERT Advisory CA-1995-16 wu-ftpd Misconfiguration Vulnerability Source: XF Type: UNKNOWN wu-ftpd-exec(494) | ||||||
Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
BACK |