SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  wu-ftpd SITE EXEC Command Format String Attack

Category: FTP      

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0573


Relevant Information