Wu Ftpd

The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.

Published: 2005-02-25T05:00:00.000Z
Updated: 2024-08-07T21:05:25.485Z

Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T00:10:03.791Z

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T00:10:03.675Z

ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service.

Published: 2007-05-21T20:00:00.000Z
Updated: 2024-09-16T23:55:39.181Z

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.585Z