CVE-2000-0514 GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges.
HighCVSS 10.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mit kerberos 5 | = 1.1 | No fix listed |
| mit kerberos 5 | = 1.1.1 | No fix listed |
References
- web.mit.edu patch vendor-advisory
- 4885 vdb-entry
- 1374 vdb-entry
- 20000614 Security Advisory: REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON mailing-list
- kerberos-gssftpd-dos(4734) vdb-entry