CVE-2008-1668 ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd...
HighCVSS 10.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc hp-ux | = 11.11 | No fix listed |
References
- HPSBUX02356 vendor-advisory
- 31471 third-party-advisory vendor-advisory
- [oss-security] 20080820 FW: CVE-2008-1668 - ftpd 2.4 - unauthorized root access - patch details mailing-list
- 30666 vdb-entry
- 1020682 vdb-entry
- ADV-2008-2364 vdb-entry vendor-advisory
- hpux-ftpd-security-bypass(44414) vdb-entry
- oval:org.mitre.oval:def:5971 signature vdb-entry