Back to Database
Status published
High
CVE-2004-0148
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows...
Vulnerability Description
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0148
Credits & Attribution
No credits recorded in the NVD database.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15423
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1637
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1
- http://www.debian.org/security/2004/dsa-457
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1147
- http://secunia.com/advisories/11055
- http://secunia.com/advisories/20168
- http://marc.info/?l=bugtraq&m=108999466902690&w=2
- http://www.securityfocus.com/bid/9832
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A648
- http://www.redhat.com/support/errata/RHSA-2004-096.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636
- http://www.frsirt.com/english/advisories/2006/1867
More from sgi
View All →CVE-2012-5530
The (1) pcmd and (2) pmlogger init scripts in Performance...
Low
2.1
CVE-2012-3421
The pduread function in pdu.c in libpcp in Performance Co-Pilot...
Medium
5
CVE-2012-3420
Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow...
Medium
5
CVE-2012-3419
Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc...
Medium
5
CVE-2012-3418
libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers...
Medium
5
Affected Vendor
Affected Software
propack, wu-ftpd
Vulnerable Versions:
2.3, 2.4, 2.4.1, 2.4.2_beta2, 2.4.2_beta18, 2.4.2_beta18_vr4, 2.4.2_beta18_vr5, 2.4.2_beta18_vr6, 2.4.2_beta18_vr7, 2.4.2_beta18_vr8, 2.4.2_beta18_vr9, 2.4.2_beta18_vr10, 2.4.2_beta18_vr11, 2.4.2_beta18_vr12, 2.4.2_beta18_vr13, 2.4.2_beta18_vr14, 2.4.2_beta18_vr15, 2.4.2_vr16, 2.4.2_vr17, 2.5.0, 2.6.0, 2.6.1, 2.6.2
Timeline
Official Publish:
September 1st, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.