|
![]() | 作者: wrbwrbwrb [wrbwrbwrb]
![]() |
登录 |
本帖由 [NetDemon] 从 << 黑客进阶>> 转移而来Ftp PASV on connect crashes the FTP server The remote FTP server dies and dump core when it is issued a PASV command as soon as the client connects. The FTP server is very likely to write a world readable core file which contains portions of the passwd file. This allows local users to obtain the shadowed passwd file. Risk factor : High. Solution : Upgrade your FTP server to a newer version or disable it CVE_ID : CVE-1999-0075 NESSUS_ID : 10086 |
地主 发表时间: 06-10-08 14:20 |
|
20CN网络安全小组版权所有
Copyright © 2000-2010 20CN Security Group. All Rights Reserved.
论坛程序编写:NetDemon
粤ICP备05087286号