CERTA-2004-AVI-122

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités ont été découvertes dans le démon ftpd de IRIX, entraînant un déni de service.

Description

Plusieurs vulnérabilités ont été découvertes dans la mise en œuvre du démon ftpd d'IRIX, permettant à un individu mal intentionné d'effectuer un déni de service lors de :

  • la connexion d'un client ftp sous windows 2000 au serveur ftp ;
  • l'utilisation du mode PORT par le démon ftpd ;
  • l'utilisation de la fonction de journalisation ftp_syslog() lors de connexions anonymes.

Solution

Appliquer les correctifs disponibles à l'adresse suivante :

ftp://patches.sgi.com/support/free/security/patches/

IRIX 6.5.2x.

Impacted products
Vendor Product Description
References

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eIRIX 6.5.2x.\u003c/P\u003e",
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans la mise en \u0153uvre du\nd\u00e9mon ftpd d\u0027IRIX, permettant \u00e0 un individu mal intentionn\u00e9 d\u0027effectuer\nun d\u00e9ni de service lors de :\n\n-   la connexion d\u0027un client ftp sous windows 2000 au serveur ftp ;\n-   l\u0027utilisation du mode `PORT` par le d\u00e9mon ftpd ;\n-   l\u0027utilisation de la fonction de journalisation `ftp_syslog()` lors\n    de connexions anonymes.\n\n## Solution\n\nAppliquer les correctifs disponibles \u00e0 l\u0027adresse suivante :\n\n    ftp://patches.sgi.com/support/free/security/patches/\n",
  "cves": [],
  "links": [
    {
      "title": "Avis de s\u00e9curit\u00e9 #20040401-01-P de SGI :",
      "url": "ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc"
    }
  ],
  "reference": "CERTA-2004-AVI-122",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-04-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le d\u00e9mon ftpd de IRIX,\nentra\u00eenant un d\u00e9ni de service.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le serveur FTPD d\u0027IRIX SGI",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis de s\u00e9curit\u00e9 #2004040101-P de SGI",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…