This host appears to be running a version of the HPUX FTP daemon which is vulnerable to a format string vulnerability in the PASS command. A potential intruder could exploit this vulnerability to gain remote access with super-user privileges (root).
Classification
Location:
Remote / Network Access,
Local / Remote,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Public
Solution
The vendor has released a patch that fixes this issue. The patch can be found by navigating HP's web site, starting with the following URL: http://welcome.hp.com/country/us/eng/software_drivers.htm
