|
|
>> Sun Solaris in.ftpd "wu_fnmatch" Denial of Service Vulnerability
|
Title : Sun Solaris in.ftpd "wu_fnmatch" Denial of Service Vulnerability
VUPEN ID : VUPEN/ADV-2005-0588
CVE ID : CVE-2005-0256
CWE ID : CWE-
Rated as : Low Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2005-05-23
|
A vulnerability was identified in Sun Solaris in.ftpd, which may be exploited by attackers to cause a denial of service. This flaw is due to an input validation error in the "wu_fnmatch()" function [wu_fnmatch.c] when processing a pattern containing a "*" character, which may be exploited by a malicious user to cause a denial of service.
Affected Products
Solaris 9
Solaris 10
Solution
Disable the FTP server
References
http://www.vupen.com/english/advisories/2005/0588
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57795-1
Credits
Vulnerability reported by iDEFENSE
ChangeLog
2005-05-23 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
