CERTA-2004-AVI-122
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités ont été découvertes dans le démon ftpd de IRIX, entraînant un déni de service.
Description
Plusieurs vulnérabilités ont été découvertes dans la mise en œuvre du démon ftpd d'IRIX, permettant à un individu mal intentionné d'effectuer un déni de service lors de :
- la connexion d'un client ftp sous windows 2000 au serveur ftp ;
- l'utilisation du mode
PORTpar le démon ftpd ; - l'utilisation de la fonction de journalisation
ftp_syslog()lors de connexions anonymes.
Solution
Appliquer les correctifs disponibles à l'adresse suivante :
ftp://patches.sgi.com/support/free/security/patches/
IRIX 6.5.2x.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eIRIX 6.5.2x.\u003c/P\u003e",
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans la mise en \u0153uvre du\nd\u00e9mon ftpd d\u0027IRIX, permettant \u00e0 un individu mal intentionn\u00e9 d\u0027effectuer\nun d\u00e9ni de service lors de :\n\n- la connexion d\u0027un client ftp sous windows 2000 au serveur ftp ;\n- l\u0027utilisation du mode `PORT` par le d\u00e9mon ftpd ;\n- l\u0027utilisation de la fonction de journalisation `ftp_syslog()` lors\n de connexions anonymes.\n\n## Solution\n\nAppliquer les correctifs disponibles \u00e0 l\u0027adresse suivante :\n\n ftp://patches.sgi.com/support/free/security/patches/\n",
"cves": [],
"links": [
{
"title": "Avis de s\u00e9curit\u00e9 #20040401-01-P de SGI :",
"url": "ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc"
}
],
"reference": "CERTA-2004-AVI-122",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2004-04-08T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le d\u00e9mon ftpd de IRIX,\nentra\u00eenant un d\u00e9ni de service.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans le serveur FTPD d\u0027IRIX SGI",
"vendor_advisories": [
{
"published_at": null,
"title": "Avis de s\u00e9curit\u00e9 #2004040101-P de SGI",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…