TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
When I run ISS, I'm getting the "ftpd args core dump"
vulnerability on some of my IIS servers running ftp service.
I'm curious to know why this is? The recommended fix is
to upgrade to "version 2.4.2" -- which is a reference to
wuftpd, which is for unix systems.
At first glance, I would think this might be a false
positive, but I'm not about to assume anything! Any
ideas what is causing this? I *think* it started
showing up in my scans after my last X-PressUpdate.
Here's the "Fix" described in the output report:
Ftpd args core dump
Some FTP daemons are vulnerable to a denial
of service attack caused by a buffer overflow
core dump. By sending a malicious command to
the FTP daemon, an attacker can overflow the
ftpd memory space (an FTP core dump) and crash
the system. FTP core dumps cause the ftpd memory
space to become populated with usernames,
encrypted passwords, or other system information
that could be useful to an attacker in performing
an attack. For example, using password information
gained by this vulnerability, a remote attacker
could log into the system or gain root access.
FIX
Upgrade to the latest version of FTP (2.4.2 or later),
available from the Academ Consulting Services Web site.
See References.
I'd appreciate any input anyone has on this issue.
Thanks.
-Tim
Timothy E. Raborn
Gulfport, MS
_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com
