CVE-2005-3296 The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.
HighCVSS 10.0
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in.
Affected products
No affected product data has been published yet.
References
- HPSBUX02071 vendor-advisory
- 1015158 vdb-entry
- www.frsirt.com exploit
- 15138 exploit vdb-entry
- oval:org.mitre.oval:def:1029 signature vdb-entry
- oval:org.mitre.oval:def:1212 signature vdb-entry
- oval:org.mitre.oval:def:1276 signature vdb-entry
- oval:org.mitre.oval:def:1439 signature vdb-entry
- oval:org.mitre.oval:def:1472 signature vdb-entry
- oval:org.mitre.oval:def:410 signature vdb-entry
- oval:org.mitre.oval:def:421 signature vdb-entry
- oval:org.mitre.oval:def:438 signature vdb-entry
- oval:org.mitre.oval:def:593 signature vdb-entry
- oval:org.mitre.oval:def:615 signature vdb-entry
- oval:org.mitre.oval:def:767 signature vdb-entry