Info

Disclosure

Aug 18, 2004

Discovery

Unknown

Dates

Exploit

Aug 22, 2004

Solution

Unknown

Description

Multiple ftpd contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered due to improper signal handler operations. By providing a USER command during an established FTP session, a remote attacker could gain access to unauthorized privileges, resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Race Condition
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 0.6.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Heimdal

Heimdal ftpd

0.6.2

References

Secunia Advisory ID: 12320
ISS X-Force ID: 17020
CVE ID: 2004-0794 (see also: NVD)
Other Advisory URL: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-009.txt.asc http://www.debian.org/security/2004/dsa-551
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2004-08/0355.html
http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025418.html
Vendor URL: http://www.pdc.kth.se/heimdal/
Vendor Specific Advisory URL: http://www.pdc.kth.se/heimdal/advisory/2004-09-13/
Vendor Specific News/Changelog Entry: http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8-9837-000c41e2cdad.html

Credit

Przemyslaw Frasunek - venglinfreebsd.lublin.pl - Przemyslaw Frasunek

Direct URL: http://osvdb.org/8994