NVD

Id
1610  
Name
CVE-2008-1668  
Description
ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-08-13  
Modified Date
2013-07-17  
Seq
2008-1668  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10387 1610 CVE-2008-1668 HPSBUX02356  View
10388 1610 CVE-2008-1668 oval:org.mitre.oval:def:5971  View
10389 1610 CVE-2008-1668 [oss-security] 20080820 FW: CVE-2008-1668 - ftpd 2.4 - unauthorized root access - patch details  View
10390 1610 CVE-2008-1668 30666  View
10391 1610 CVE-2008-1668 1020682  View
10392 1610 CVE-2008-1668 ADV-2008-2364  View
10393 1610 CVE-2008-1668 hpux-ftpd-security-bypass(44414)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46312 JVNDB-2008-001622 HP-UX の ftpd における権限昇格の脆弱性 HP-UX の ftpd (wu-ftpd) には、権限昇格の脆弱性が存在します。 CVE-2008-1668 31781 CVE-2008-1668 1610 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001622.html 2008-08-12 2008-09-05 View