CVE-2001-0935

Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:washington_university:wu-ftpd:2.4:::::::*
	cpe:2.3:a:washington_university:wu-ftpd:2.6.0:::::::*
	cpe:2.3:a:washington_university:wu-ftpd:2.6.1:::::::*

History

No history.

Information

Published : 2001-11-28 05:00

Updated : 2008-09-10 19:09

NVD link : CVE-2001-0935

Mitre link : CVE-2001-0935

CVE.ORG link : CVE-2001-0935

JSON object : View

Products Affected

washington_university

wu-ftpd

CWE

NVD-CWE-Other

{"id": "CVE-2001-0935", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-11-28T05:00:00.000", "references": [{"url": "http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550."}], "lastModified": "2008-09-10T19:09:16.697", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:washington_university:wu-ftpd:2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A86BB4F6-210F-448A-A3CB-127BEB5BD0D2"}, {"criteria": "cpe:2.3:a:washington_university:wu-ftpd:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5E9B738-E8DF-4FE7-B4A5-91DE46A9CF8F"}, {"criteria": "cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7196CF2D-8CCC-454A-A2C1-6408A9D636C5"}], "operator": "OR"}]}], "vendorComments": [{"comment": "CVE-2001-0935 refers to vulnerabilities found when SUSE did a code audit of the wu-ftpd glob.c file in wu-ftpd 2.6.0. They shared these details with the wu-ftpd upstream authors who clarified that some of the issues did not apply, and all were addressed by the version of glob.c in upstream wu-ftpd 2.6.1. Therefore we believe that the issues labelled as CVE-2001-0935 do not affect wu-ftpd 2.6.1 or later versions and therefore do not affect Red Hat Enterprise Linux 2.1.", "lastModified": "2006-09-27T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "cve@mitre.org"}