FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/2601 | Exploit Vendor Advisory |
http://www.securityfocus.com/archive/1/177200 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-07-01 21:00
Updated : 2018-10-30 09:25
NVD link : CVE-2001-0421
Mitre link : CVE-2001-0421
JSON object : View
CWE
Products Affected
sun
- sunos
- solaris