CAN-2004-0148 - Secunia.com

CVE Reference: CAN-2004-0148
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CAN-2004-0148

Description: wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

CVE Status: Entry

References: XF http://xforce.iss.net/xforce/xfdb/15423 SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1 SCO SAID Secunia Advisory: SA11055 Secunia Advisory: SA20168 REDHAT http://www.redhat.com/support/errata/RHSA-2004-096.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1147 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1636 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1637 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:648 HP http://marc.theaimsgroup.com/?l=bugtraq&m=108999466902690&w=2 DEBIAN http://www.debian.org/security/2004/dsa-457 BID 9832

Return to the previous page.

Secunia