NVD

Id
70605  
Name
CVE-2004-0148  
Description
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2004-04-15  
Modified Date
2016-10-17  
Seq
2004-0148  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364067 70605 CVE-2004-0148 SSRT4704  View
364068 70605 CVE-2004-0148 oval:org.mitre.oval:def:1147  View
364069 70605 CVE-2004-0148 oval:org.mitre.oval:def:1636  View
364070 70605 CVE-2004-0148 oval:org.mitre.oval:def:1637  View
364071 70605 CVE-2004-0148 oval:org.mitre.oval:def:648  View
364072 70605 CVE-2004-0148 102356  View
364073 70605 CVE-2004-0148 DSA-457  View
364074 70605 CVE-2004-0148 ADV-2006-1867  View
364075 70605 CVE-2004-0148 RHSA-2004:096  View
364076 70605 CVE-2004-0148 9832  View
364077 70605 CVE-2004-0148 wuftpd-restrictedgid-gain-access(15423)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62730 JVNDB-2004-000071 WU-FTPD における restricted-gid による制限を回避される脆弱性 WU-FTPD には、FTP ログインしたユーザが chmod リクエストを利用することで、restricted-gid による制限を回避可能となる脆弱性が存在します。 CVE-2004-0148 8575 CVE-2004-0148 70605 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000071.html 2004-03-08 2007-04-01 View