NVD

Id
70641  
Name
CVE-2004-0185  
Description
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2004-03-15  
Modified Date
2008-09-05  
Seq
2004-0185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364366 70641 CVE-2004-0185 ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patch  View
364367 70641 CVE-2004-0185 http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txt  View
364368 70641 CVE-2004-0185 DSA-457  View
364369 70641 CVE-2004-0185 RHSA-2004:096  View
364370 70641 CVE-2004-0185 http://www.securiteam.com/unixfocus/6X00Q1P8KC.html  View
364371 70641 CVE-2004-0185 8893  View
364372 70641 CVE-2004-0185 wuftpd-skey-bo(13518)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63594 JVNDB-2003-000320 WU-FTPD の S/Key 認証におけるバッファオーバーフローの脆弱性 S/Key 認証を有効にしている WU-FTPD には、skey_challenge() 関数内でユーザ名を取り扱う変数に対するチェックが不適切であるため、異常に長いログインユーザ名を含む認証用情報を送りつけることで、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0185 8612 CVE-2004-0185 70641 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000320.html 2003-10-26 2007-04-01 View