War-FTPd 1.6x CWD/MKD DoS漏洞

漏洞信息详情

War-FTPd 1.6x CWD/MKD DoS漏洞

• CNNVD编号：CNNVD-200002-013
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2000-0131
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-02-01
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-05-02
  
• 厂        商：
  
  jgaa
• 漏洞来源：
  Discovered and pos…

War FTPd 1.6x版本存在缓冲区溢出漏洞。用户借助超长MKD和CWD命令可以导致拒绝服务。

Version 1.67-4 has been patched against this vulnerability, and is available at:
http://war.jgaa.com/alert/files/ward167-4.zip
Also, upgrading to version 1.71 will fix this problem. 1.71 is available at:
http://war.jgaa.com/alert/files/ward171-0.zip
These versions have a sanity check that prevents arguments longer than the length specified in the MAX_PATH variable from being accepted.

来源: BID
名称: 966
链接:http://www.securityfocus.com/bid/966

来源: OSVDB
名称: 4677
链接:http://www.osvdb.org/4677

来源: BUGTRAQ
名称: 20000201 war-ftpd 1.6x DoS
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=94960703721503&w=2